Eve
914bc2605a
fix(progress): clamp loaded to total for computable upload/download events ( #7458 )
...
* fix(progress): clamp loaded value to total in progress reducer
* test(progress): cover out-of-order events in reducer clamp case
* fix(progress): keep bytesNotified monotonic for out-of-order events
---------
Co-authored-by: Jay <jasonsaayman@gmail.com>
2026-04-09 17:40:50 +02:00
Jay
0912bde937
fix: support multiselect in form data ( #10676 )
2026-04-09 17:31:39 +02:00
Jay
fb3befb6da
fix: no_proxy hostname normalization bypass leads to ssrf ( #10661 )
2026-04-06 13:47:03 +02:00
nthbotast
042e776335
docs(buildURL): fix outdated encode() comment ( #7478 )
...
Co-authored-by: Nathanael BOT <nathanaelbot@minidenathanael.home>
Co-authored-by: Jay <jasonsaayman@gmail.com>
2026-03-12 15:29:27 +02:00
Mohsen
885b4af6f5
feat: support react native blob objects ( #5764 )
...
* feat: support react native blob objects
* test: cover react native blob objects detection
* fix: improve isReactNativeBlob and isReactNative checks for better validation
* feat: support appending React Native blob objects to FormData without recursion
---------
Co-authored-by: Jay <jasonsaayman@gmail.com>
2026-02-24 20:36:32 +02:00
Jay
ef3711d1b3
feat: implement prettier and fix all issues ( #7385 )
...
* feat: implement prettier and fix all issues
* fix: failing tests
* fix: implement feedback from codel, ai etc
* chore: dont throw in trim function
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
* fix: incorrect fix
---------
Co-authored-by: cubic-dev-ai[bot] <191113872+cubic-dev-ai[bot]@users.noreply.github.com>
2026-02-14 16:59:48 +02:00
asmitha-16
475e75a260
feat: add input validation to isAbsoluteURL ( #7326 )
...
* Add input validation to isAbsoluteURL
* chore: add removed doc block
---------
Co-authored-by: Asmitha B <youremail@example.com>
Co-authored-by: Jay <jasonsaayman@gmail.com>
2026-02-05 15:58:40 +02:00
techcodie
f8694341de
docs: refresh CDN URLs and example JSON headers ( #7236 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-12-30 13:30:43 +02:00
SANDESH LENDVE
46db3316ac
doc: update deprecated var usage in documentation examples ( #7246 )
...
* test(http): fix HTTPS protocol test by using local HTTPS server instead of external request
* docs: update var usage in documentation examples
* docs: updated var to const
---------
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-12-30 13:16:52 +02:00
Nandan Acharya
e0a120620e
test: add Node unit tests for toFormData and refactor buildURL to avoid param reassignment ( #7272 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-12-08 08:22:30 +02:00
Justin Dhillon
d5b76d4af7
style: get rid of redundency in imports ( #6315 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-11-12 21:11:56 +02:00
Amit Verma
f1c17be4a9
refactor: improve Cookie Handling ( #7129 )
...
* Improve Cookie Handling
* Update lib/helpers/cookies.js
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* Update lib/helpers/cookies.js
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---------
Co-authored-by: Jay <jasonsaayman@gmail.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-10-11 10:43:34 +02:00
Abhishek3880
34ed58167f
docs: add comprehensive JSDoc documentation to bind helper function ( #7119 )
...
- Add complete JSDoc block with parameter descriptions
- Include return type and description
- Improve code documentation for better developer experience
- Follow established JSDoc patterns in the codebase
2025-10-09 09:43:07 +02:00
Abhishek3880
f4970f35b8
chore: add missing Cloudflare HTTP status codes ( #7117 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-10-09 09:42:44 +02:00
Ameer Assadi
945435fc51
fix(node): enforce maxContentLength for data: URLs ( #7011 )
...
* fix(node): enforce maxContentLength for data: URLs (pre-decode size check)- CVE-2025-58754
* feat(utils): add estimateDataURLDecodedBytes helper and fix duplicate condition in base64 padding check
* feat: add estimateDataURLDecodedBytes helper with tests
2025-09-10 15:08:43 +02:00
Emiedonmokumo Dick-Boro
a9f47afbf3
fix(fetch-adapter): set correct Content-Type for Node FormData ( #6998 )
...
* fix(fetch-adapter): set correct Content-Type for Node FormData
* Update lib/helpers/resolveConfig.js
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
* test(fetch): replace chai expect with Node assert
* fix: define formHeaders for FormData to resolve no-undef error
* fix: filter headers to only update the target headers
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-08-25 20:46:53 +02:00
최예찬
6d84189349
fix(params): removing '[' and ']' from URL encode exclude characters ( #3316 ) ( #5715 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-08-01 20:44:47 +02:00
Noritaka Kobayashi
6161947d9d
refactor: use spread operator instead of '.apply()' ( #6938 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-07-06 16:59:56 +02:00
Noritaka Kobayashi
a1d16dd9c5
refactor: use an object spread instead of Object.assign ( #6939 )
...
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-07-06 16:51:51 +02:00
Dimitrios Lazanas
5064b108de
fix(form-data): convert boolean values to strings in FormData serialization ( #6917 )
2025-05-21 17:32:38 +02:00
Ionuț G. Stan
987d2e2dd3
fix(http): send minimal end multipart boundary ( #6661 )
2025-04-24 22:19:48 +03:00
Marc Hassan
ec159e507b
fix(xhr/fetch): pass allowAbsoluteUrls to buildFullPath in xhr and fetch adapters ( #6814 )
2025-03-10 14:29:41 +02:00
Dmitriy Mozgovoy
36a5a620be
fix(utils): move generateString to platform utils to avoid importing crypto module into client builds; ( #6789 )
...
* chore(ci): Add release-it script;
* fix(utils): move generateString util to platform utils to avoid importing crypto module into client build;
---------
Co-authored-by: Jay <jasonsaayman@gmail.com>
2025-02-26 10:30:55 +02:00
Dmitriy Mozgovoy
0a8d6e19da
fix: use URL API instead of DOM to fix a potential vulnerability warning; ( #6714 )
2024-11-25 22:02:07 +02:00
Tommaso Paulon
eac4619fe2
fix: allow passing a callback as paramsSerializer to buildURL ( #6680 )
...
* fix: allow passing a callback as paramsSerializer to buildURL
* fix: add missing semicolon
2024-11-12 17:33:33 +02:00
Kasper Isager Dalsgarð
df956d18fe
fix(http): use globalThis.TextEncoder when available ( #6634 )
...
Co-authored-by: Dmitriy Mozgovoy <robotshara@gmail.com>
2024-11-12 16:00:26 +02:00
Ell Bradshaw
8f3cde11d2
Warn about common option misspellings ( #6489 )
...
* chore(tests): add failing tests for baseUrl
* chore(tests): simplify to just warning
* feat: warn about likely-misspelled options
* chore: add semi-colon
* chore: add missing semi-colons
---------
Co-authored-by: Ell Bradshaw <ell@c9a.co>
Co-authored-by: Jay <jasonsaayman@gmail.com>
2024-09-26 21:31:24 +02:00
Dmitriy Mozgovoy
d1980854fe
fix(fetch): fix stream handling in Safari by fallback to using a stream reader instead of an async iterator; ( #6584 )
2024-08-31 22:14:23 +03:00
Dmitriy Mozgovoy
df9889b83c
fix(fetch): optimize signals composing logic; ( #6582 )
2024-08-30 21:26:12 +03:00
Dmitriy Mozgovoy
fed1a4b2d7
fix(core): fix ReferenceError: navigator is not defined for custom environments; ( #6567 )
2024-08-23 15:16:42 +03:00
Lev Pachmanov
6b6b605eaf
fix(sec): CVE-2024-39338 ( #6539 ) ( #6543 )
...
* fix(sec): cve-2024-39338 (#6539 )
* fix(sec): fix test
2024-08-13 20:43:05 +02:00
Đỗ Trọng Hải
07a661a2a6
fix(sec): disregard protocol-relative URL to remediate SSRF ( #6539 )
...
* fix(sec): disregard protocol-relative URL to remediate SSRF
Signed-off-by: hainenber <dotronghai96@gmail.com>
* feat(test/unit/regression): add regression test to ensure SNYK-JS-AXIOS-7361793 fixed in future version
Signed-off-by: hainenber <dotronghai96@gmail.com>
* chore: add EoF newline + comments
Signed-off-by: hainenber <dotronghai96@gmail.com>
* chore: fix eslint issues
Signed-off-by: hainenber <dotronghai96@gmail.com>
* Update SNYK-JS-AXIOS-7361793.js
Co-authored-by: tom-reinders <tom-reinders@users.noreply.github.com>
---------
Signed-off-by: hainenber <dotronghai96@gmail.com>
Co-authored-by: tom-reinders <tom-reinders@users.noreply.github.com>
2024-08-13 17:03:25 +02:00
Dmitriy Mozgovoy
e3c76fc9bd
fix(adapter): fix progress event emitting; ( #6518 )
2024-08-01 16:59:58 +03:00
Dmitriy Mozgovoy
733f15fe5b
fix(fetch): fixed ReferenceError issue when TextEncoder is not available in the environment; ( #6410 )
2024-05-20 16:15:15 +03:00
Dmitriy Mozgovoy
a3ff99b59d
feat(adapter): add fetch adapter; ( #6371 )
2024-04-28 22:33:49 +03:00
Dmitriy Mozgovoy
3c0c11cade
fix(security): fixed formToJSON prototype pollution vulnerability; ( #6167 )
2024-01-03 21:37:32 +02:00
Willian Agostini
5e7ad38fb0
fix: Regular Expression Denial of Service (ReDoS) ( #6132 )
2023-12-26 22:29:26 +02:00
Dmitriy Mozgovoy
cff996779b
feat(withXSRFToken): added withXSRFToken option as a workaround to achieve the old withCredentials behavior; ( #6046 )
2023-11-14 15:38:25 +02:00
Dmitriy Mozgovoy
3dc8369e50
fix(platform): fixed emulated browser detection in node.js environment; ( #6055 )
2023-11-07 22:16:15 +02:00
Dmitriy Mozgovoy
2701911260
feat(dns): added support for a custom lookup function; ( #5339 )
2023-04-26 02:04:59 +03:00
Dmitriy Mozgovoy
6b3c305fc4
fix(http): use explicit import instead of TextEncoder global; ( #5530 )
2023-02-03 19:34:07 +02:00
Dmitriy Mozgovoy
08104c028c
fix(serializer): fixed serialization of array-like objects; ( #5518 )
2023-02-01 20:38:59 +02:00
Dmitriy Mozgovoy
9957377260
chore(ci): change release-it git config; ( #5512 )
2023-01-31 15:39:10 +02:00
Dmitriy Mozgovoy
6ac574e00a
feat(fomdata): added support for spec-compliant FormData & Blob types; ( #5316 )
2023-01-31 01:10:39 +02:00
ItsNotGoodName
65e8d1e28c
fix(http): add zlib headers if missing ( #5497 )
2023-01-31 00:49:37 +02:00
Winnie
56e9ca1a86
fix: Add missing HttpStatusCode ( #5345 )
2022-12-06 22:34:48 +02:00
Ivan Barsukov
786b113a40
fix: removing multiple/trailing/leading whitespaces ( #5022 )
...
* fix: removing multiple/trailing/leading whitespaces
* Reverting changes in the dist directory
Co-authored-by: Jay <jasonsaayman@gmail.com>
2022-11-25 15:56:31 +02:00
ChronosMasterOfAllTime
b0ebf9fcac
Fix: Don't add null values to query string. ( #5108 )
...
* feat: add boolean flag to mimic pre 1.x behavior for paramsSerializer custom function
* chore: update ParamsSerializer Readme
* fix: dont slice hash off URL if not appending params
* Omit nulls from formData serialization
* fix: dont add nulls or undefined values to arrays either
* readme update
* fix test
* chore: documentation
* chore: do TS properly
Co-authored-by: Jay <jasonsaayman@gmail.com>
2022-10-15 15:01:59 +02:00
Dmitriy Mozgovoy
9d4b016dde
feat: added custom params serializer support; ( #5113 )
...
* Added custom params serializer support;
* Added missed semicolon;
Fixed allowUnknown option;
Co-authored-by: Jay <jasonsaayman@gmail.com>
2022-10-13 22:12:10 +02:00
Dmitriy Mozgovoy
cd8989a987
Fixed missed minified builds; ( #4805 )
...
* Fixed missed minified builds;
Refactored utils.js;
Refactored `utils.isStandardBrowserEnv()` as a `platform/browser` property;
Added builds size log;
* Replaced `rollup-plugin-filesize` with `rollup-plugin-bundle-size`;
Co-authored-by: Jay <jasonsaayman@gmail.com>
2022-08-01 19:13:14 +02:00
