Skip to content

Version 0.9.9.#4

Open
phpclub wants to merge 1 commit into
masterfrom
bump-2026-05-27
Open

Version 0.9.9.#4
phpclub wants to merge 1 commit into
masterfrom
bump-2026-05-27

Conversation

@phpclub
Copy link
Copy Markdown

@phpclub phpclub commented May 27, 2026

Proposed changes

nginx modules:

  • Security: heap-buffer-overflow in js_fetch_proxy when location variables ($http_, $arg_, $cookie_*) are interpolated into the fetch URL (introduced in 0.9.4).
  • Feature: js_access directive.
  • Feature: r.readRequestText/ArrayBuffer/JSON — async body readers available in js_access and js_content.
  • Feature: r.readRequestForm — parses urlencoded and multipart/ form-data bodies; returns a RequestForm accessor object.
  • Feature: r.decline() — passes control to the next access handler.
  • Feature: r.jsVarNames([prefix]) — lists js_var-declared variables.

Core:

  • Bugfix: wrong evaluation order of call arguments with side effects; f(a, a=2) now correctly passes the original a as the first argument (introduced in 0.9.7).

Checklist

Before creating a PR, run through this checklist and mark each as complete:

  • I have read the CONTRIBUTING document
  • If applicable, I have added tests that prove my fix is effective or that my feature works
  • If applicable, I have checked that any relevant tests pass after adding my changes

  nginx modules:
  - Security: heap-buffer-overflow in js_fetch_proxy when location
    variables ($http_*, $arg_*, $cookie_*) are interpolated into
    the fetch URL (introduced in 0.9.4).
  - Feature: js_access directive.
  - Feature: r.readRequestText/ArrayBuffer/JSON — async body readers
    available in js_access and js_content.
  - Feature: r.readRequestForm — parses urlencoded and multipart/
    form-data bodies; returns a RequestForm accessor object.
  - Feature: r.decline() — passes control to the next access handler.
  - Feature: r.jsVarNames([prefix]) — lists js_var-declared variables.

  Core:
  - Bugfix: wrong evaluation order of call arguments with side
    effects; f(a, a=2) now correctly passes the original a as
    the first argument (introduced in 0.9.7).
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant