ChangeLog for warp

3.4.1

• Using time-manager v0.1.0, and auto-update v0.2.0. #986

3.4.0

• Reworked request lines (CRLF) parsing: #968
  • We do not accept multiline headers anymore. (RFC 7230 deprecated it 10 years ago)
  • Reworked request lines (CRLF) parsing to not unnecessarily copy bytestrings.
• Using http2 v5.1.0.
• fourmolu is used as an official formatter.

3.3.31

• Supporting http2 v5.0.

3.3.30

• Length of ResponseBuilder responses will now also be passed to the logger. #946
• Using If-(None-)Match headers simultaneously with If-(Un)Modified-Since headers now follow the RFC 9110 standard. So If-(Un)Modified-Since headers will be correctly ignored if their respective -Match counterpart is also present in the request headers. #945
• Fixed adding superfluous Server header when using HTTP/2.0 if response already has it. #943

3.3.29

• Preparing coming “http2” v4.2.0.

3.3.28

• Fix for the “-x509” flag #935

3.3.27

• Fixing busy loop due to eMFILE #933

3.3.26

• Using crypton instead of cryptonite. #931

3.3.25

• Catching up the signature change of openFd in the unix package v2.8. #926

3.3.24

• Switching the version of the “recv” package from 0.0.x to 0.1.x.

3.3.23

• Add setAccept for hooking the socket accept call. #912
• Removed some package dependencies from test suite #902
• Factored out Network.Wai.Handler.Warp.Recv to its own package recv. #899

3.3.22

• Creating a bigger buffer when the current one is too small to fit the Builder #895
• Using InvalidRequest instead of HTTP2Error #890

3.3.21

• Support GHC 9.4 #889

3.3.20

• Adding “x509” flag. #871

3.3.19

• Allowing the eMFILE exception in acceptNewConnection. #831

3.3.18

• Tidy up HashMap and MultiMap #864
• Support GHC 9.2 #863

3.3.17

• Modify exception handling to swallow async exceptions in forked thread #850
• Switch default forking function to not install the global exception handler (minor optimization) #851

3.3.16

• Move exception handling over to unliftio for better async exception support #845

3.3.15

• Using http2 v3.

3.3.14

• Drop support for GHC < 8.2.
• Fix header length calculation for settingsMaxTotalHeaderLength #838
• UTF-8 encoding in exceptionResponseForDebug. #836

3.3.13

• pReadMaker is exported from the Internal module.

3.3.12

• Fixing HTTP/2 logging relating to status and push.
• Adding QUIC constructor to Transport.

3.3.11

• Adding setAltSvc. #801
• Fixing timeout of builder for HTTP/1.1. #800
• http2server and withII are exported from Internal module.

3.3.10

• Convert ResourceVanished error to ConnectionClosedByPeer exception #795
• Expand the documentation for setTimeout. #796

3.3.9

• Don’t insert Last-Modified: if exists. #791

3.3.8

• Maximum header size is configurable. #781
• Ignoring an exception from shutdown (gracefulClose).

3.3.7

• InvalidArgument (Bad file descriptor) is ignored in receive. #787

3.3.6

• Fixing a bug of thread killed in the case of event source with HTTP/2 (fixing #692 and #785)
• New APIs: clientCertificate to get client’s certificate #783

3.3.5

• New APIs: setGracefulCloseTimeout1 and setGracefulCloseTimeout2. For HTTP/1.x, connections are closed immediately by default. gracefullClose is used for HTTP/2 by default. #782

3.3.4

• Setting isSecure of HTTP/2 correctly.

3.3.3

• Calling setOnException in HTTP/2. #771

3.3.2

• Fixing a bug of HTTP/2 without fd cache.

3.3.1

• Using gracefullClose of network 3.1.1 or later if available.
• If the first line of an HTTP request is really invalid, don’t send an error response

3.3.0

• Switching from the original implementation to HTTP/2 server library. #754
• Breaking change: The type of http2dataTrailers is now HTTP2Data -> TrailersMaker.

3.2.28

• Using the Strict and StrictData language extensions for GHC >8. #752
• System.TimeManager is now in a separate package: time-manager. #750
• Fixing a bug of ALPN.
• Introducing the half closed state for HTTP/2. #717

3.2.27

• Internally, use lookupEnv instead of getEnvironment to get the value of the PORT environment variable #736
• Throw 413 for too large payload
• Throw 431 for too large headers #741
• Use exception response handler in HTTP/2 & improve connection preservation in HTTP/1.x if uncaught exceptions are thrown in an Application. #738

3.2.26

• Support network package version 3

3.2.25

• Removing Connection: and Transfer-Encoding: from HTTP/2 response header #707

3.2.24

• Fix HTTP2 unwanted GoAways on late WindowUpdate frames. #711

3.2.23

• Log real requsts when an app throws an error. #698

3.2.22

• Fixing large request body in HTTP/2.

3.2.21

• Fixing HTTP/2’s timeout handler in request’s vault.

3.2.20

• Fixing large request body in HTTP/2 #593

3.2.19

• Fixing 0-byte request body in HTTP/2 #597 #679

3.2.18.2

• Replace dependency on blaze-builder with bsb-http-chunked

3.2.18.1

• Fix benchmark compilation #681

3.2.18

• Make testWithApplicationSettings actually use the settings passed. #677.

3.2.17

• Add support for windows thread block hack and closeOnExec to TLS. #674.

3.2.16

• In testWithApplication, don’t throwTo ignorable exceptions #671, and reuse bindRandomPortTCP

3.2.15

• Address space leak from exception handlers #649

3.2.14

• Support streaming-commons 0.2
• Warnings cleanup

3.2.13

• Tickling HTTP/2 timer. 624
• Guarantee atomicity of WINDOW_UPDATE increments 622
• Relax HTTP2 headers check 621

3.2.12

• If an empty string is set by setServerName, the Server header is not included in response headers #619

3.2.11.2

• Don’t throw exceptions when closing a keep-alive connection #618

3.2.11.1

• Move exception handling to top of thread (fixes #613)

3.2.11

• Fixing 10 HTTP2 bugs pointed out by h2spec v2.

3.2.10

• Add connFree to Connection. Close socket connections on timeout triggered. Timeout exceptions extend from SomeAsyncException. #602 #605

3.2.9

• Fixing a space leak. #586

3.2.8

• Fixing HTTP2 requestBodyLength. #573
• Making HTTP/2 :path optional for the CONNECT method. #572
• Adding new APIs for HTTP/2 trailers: http2dataTrailers and modifyHTTP2Data #566

3.2.7

• Adding new APIs for HTTP/2 server push: getHTTP2Data and setHTTP2Data #510
• Better accept(2) error handling #553
• Adding getGracefulShutdownTimeout.
• Add {test,}withApplicationSettings #531

3.2.6

• Using token based APIs of http2 1.6.

3.2.5

• Ignoring errors from setSocketOption. #526.

3.2.4

• Added withApplication, testWithApplication, and openFreePort
• Fixing reaper delay value of file info cache.

3.2.3

• Using http2 v1.5.x which much improves the performance of HTTP/2.
• To get rid of the bottleneck of ByteString’s (==), a new logic to compare header names is introduced.

3.2.2

• Throwing errno for pread #499.
• Makeing compilable on Windows #505.

3.2.1

• Add back warpVersion

3.2.0

• Major version up due to breaking changes. This is because the HTTP/2 code was started over with Warp 3.1.3 due to performance issue #470.
• runHTTP2, runHTTP2Env, runHTTP2Settings and runHTTP2SettingsSocket were removed from the Network.Wai.Handler.Warp module.
• The performance of HTTP/2 was drastically improved. Now the performance of HTTP/2 is almost the same as that of HTTP/1.1.
• The logic to handle files in HTTP/2 is now identical to that in HTTP/1.1.
• Internal stuff was removed from the Network.Wai.Handler.Warp module according to the plan.

3.1.12

• Setting lower bound for auto-update #495

3.1.11

• Providing a new API: killManager.
• Preventing space leaks due to Weak ThreadId #488
• Setting upper bound for http2.

3.1.10

• setFileInfoCacheDuration
• setLogger
• FileInfo/getFileInfo
• Fix: warp-tls strips out the Host request header #478

3.1.9

• Using the new priority queue based on PSQ provided by http2 lib again.

3.1.8

• Using the new priority queue based on PSQ provided by http2 lib.

3.1.7

• A concatenated Cookie header is prepended to the headers to ensure that it flows pseudo headers. #454
• Providing a new settings: setHTTP2Disabled #450

3.1.6

• Adding back http-types 0.8 support #449

3.1.5

• Using http-types v0.9.
• Fixing build on OpenBSD. #428 #440
• Fixing build on Windows. #438

3.1.4

• Using newer http2 library to prevent change table size attacks.
• API for HTTP/2 server push and trailers. #426
• Preventing response splitting attacks. #435
• Concatenating multiple Cookie: headers in HTTP/2.

3.1.3

• Warp now supports blaze-builder v0.4 or later only.
• HTTP/2 code was improved: dynamic priority change, efficient queuing and sender loop continuation. #423 #424

3.1.2

• Configurable Slowloris size #418

3.1.1

• Fixing a bug of HTTP/2 when no FD cache is used #411
• Fixing a buffer-pool bug #406 #407

3.1.0

• Supporting HTTP/2 #399
• Cleaning up APIs #387

3.0.13.1

• Remove dependency on the void package #375

3.0.13

• Turn off file descriptor cache by default #371

3.0.12.1

• Fix for: HEAD requests returning non-empty entity body #369

3.0.12

• Only conditionally produce HTTP 100 Continue

3.0.11

• Better HEAD support for files #357

3.0.10

• Fix missing IORef tweak
• Disable timeouts as soon as request body is fully consumed. This addresses the common case of a non-chunked request body. Previously, we would wait until a zero-length ByteString is returned, but that is suboptimal for some cases. For more information, see issue 351.
• Add pauseTimeout function

3.0.9.3

• Don’t serve a 416 status code for 0-length files keter issue #75
• Don’t serve content-length for 416 responses #346

3.0.9.2

Fix support for old versions of bytestring

3.0.9.1

Add support for blaze-builder 0.4

3.0.9

• Add runEnv: like run but uses $PORT #334

3.0.5.2

• Pass the Request to settingsOnException handlers when available. #326

3.0.5

Support for PROXY protocol, such as used by Amazon ELB TCP. This is useful since, for example, Amazon ELB HTTP does not have support for Websockets. More information on the protocol is available from Amazon.

3.0.4

Added setFork.

3.0.3

Modify flushing of request bodies. Previously, regardless of the size of the request body, the entire body would be flushed. When uploading large files to a web app that does not accept such files (e.g., returns a 413 too large status), browsers would still send the entire request body and the servers will still receive it.

The new behavior is to detect if there is a large amount of data still to be consumed and, if so, immediately terminate the connection. In the case of chunked request bodies, up to a maximum number of bytes is consumed before the connection is terminated.

This is controlled by the new setting setMaximumBodyFlush. A value of @Nothing@ will return the original behavior of flushing the entire body.

3.0.0

WAI no longer uses conduit for its streaming interface.

2.1.0

The onOpen and onClose settings now provide the SockAddr of the client, and onOpen can return a Bool which will close the connection. The responseRaw response has been added, which provides a more elegant way to handle WebSockets than the previous settingsIntercept. The old settings accessors have been deprecated in favor of new setters, which will allow settings changes to be made in the future without breaking backwards compatibility.

2.0.0

ResourceT is not used anymore. Request and Response is now abstract data types. To use their constructors, Internal module should be imported.

1.3.9

Support for byte range requests.

1.3.7

Sockets now have FD_CLOEXEC set on them. This behavior is more secure, and the change should not affect the vast majority of use cases. However, it appeared that this is buggy and is fixed in 2.0.0.