Infrastructure/astro
0
Fork 0
mirror of https://github.com/withastro/astro.git synced 2025-03-10 23:01:26 -05:00
Code Issues Activity

[ci] release (#12648)

Browse source 
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
This commit is contained in:
Houston (Bot) 2024-12-05 07:45:35 -08:00 • committed by GitHub
parent e7d14c374b
commit ba4aac1051
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
30 changed files with 65 additions and 61 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
.changeset/swift-pandas-serve.md
View file

@ -1,5 +0,0 @@
---
'astro': patch
---
Fixes an issue where the `checkOrigin` feature wasn't correctly checking the `content-type` header

2
examples/basics/package.json
View file

@ -11,6 +11,6 @@
"astro": "astro"
},
"dependencies": {
"astro": "^4.16.16"
"astro": "^4.16.17"
}
}

2
examples/blog/package.json
View file

@ -14,6 +14,6 @@
"@astrojs/mdx": "^3.1.9",
"@astrojs/rss": "^4.0.9",
"@astrojs/sitemap": "^3.2.1",
"astro": "^4.16.16"
"astro": "^4.16.17"
}
}

2
examples/component/package.json
View file

@ -15,7 +15,7 @@
],
"scripts": {},
"devDependencies": {
"astro": "^4.16.16"
"astro": "^4.16.17"
},
"peerDependencies": {
"astro": "^4.0.0"

2
examples/container-with-vitest/package.json
View file

@ -12,7 +12,7 @@
"test": "vitest run"
},
"dependencies": {
"astro": "^4.16.16",
"astro": "^4.16.17",
"@astrojs/react": "^3.6.3",
"react": "^18.3.1",
"react-dom": "^18.3.1",

2
examples/framework-alpine/package.json
View file

@ -14,6 +14,6 @@
"@astrojs/alpinejs": "^0.4.0",
"@types/alpinejs": "^3.13.11",
"alpinejs": "^3.14.3",
"astro": "^4.16.16"
"astro": "^4.16.17"
}
}

2
examples/framework-lit/package.json
View file

@ -13,7 +13,7 @@
"dependencies": {
"@astrojs/lit": "^4.3.0",
"@webcomponents/template-shadowroot": "^0.2.1",
"astro": "^4.16.16",
"astro": "^4.16.17",
"lit": "^3.2.1"
}
}

2
examples/framework-multiple/package.json
View file

@ -18,7 +18,7 @@
"@astrojs/vue": "^4.5.3",
"@types/react": "^18.3.12",
"@types/react-dom": "^18.3.1",
"astro": "^4.16.16",
"astro": "^4.16.17",
"preact": "^10.25.0",
"react": "^18.3.1",
"react-dom": "^18.3.1",

2
examples/framework-preact/package.json
View file

@ -13,7 +13,7 @@
"dependencies": {
"@astrojs/preact": "^3.5.4",
"@preact/signals": "^1.3.0",
"astro": "^4.16.16",
"astro": "^4.16.17",
"preact": "^10.25.0"
}
}

2
examples/framework-react/package.json
View file

@ -14,7 +14,7 @@
"@astrojs/react": "^3.6.3",
"@types/react": "^18.3.12",
"@types/react-dom": "^18.3.1",
"astro": "^4.16.16",
"astro": "^4.16.17",
"react": "^18.3.1",
"react-dom": "^18.3.1"
}

2
examples/framework-solid/package.json
View file

@ -12,7 +12,7 @@
},
"dependencies": {
"@astrojs/solid-js": "^4.4.4",
"astro": "^4.16.16",
"astro": "^4.16.17",
"solid-js": "^1.9.3"
}
}

2
examples/framework-svelte/package.json
View file

@ -12,7 +12,7 @@
},
"dependencies": {
"@astrojs/svelte": "^6.0.2",
"astro": "^4.16.16",
"astro": "^4.16.17",
"svelte": "^5.2.9"
}
}

2
examples/framework-vue/package.json
View file

@ -12,7 +12,7 @@
},
"dependencies": {
"@astrojs/vue": "^4.5.3",
"astro": "^4.16.16",
"astro": "^4.16.17",
"vue": "^3.5.13"
}
}

2
examples/hackernews/package.json
View file

@ -12,6 +12,6 @@
},
"dependencies": {
"@astrojs/node": "^8.3.4",
"astro": "^4.16.16"
"astro": "^4.16.17"
}
}

2
examples/integration/package.json
View file

@ -15,7 +15,7 @@
],
"scripts": {},
"devDependencies": {
"astro": "^4.16.16"
"astro": "^4.16.17"
},
"peerDependencies": {
"astro": "^4.0.0"

2
examples/minimal/package.json
View file

@ -11,6 +11,6 @@
"astro": "astro"
},
"dependencies": {
"astro": "^4.16.16"
"astro": "^4.16.17"
}
}

2
examples/portfolio/package.json
View file

@ -11,6 +11,6 @@
"astro": "astro"
},
"dependencies": {
"astro": "^4.16.16"
"astro": "^4.16.17"
}
}

2
examples/ssr/package.json
View file

@ -14,7 +14,7 @@
"dependencies": {
"@astrojs/node": "^8.3.4",
"@astrojs/svelte": "^6.0.2",
"astro": "^4.16.16",
"astro": "^4.16.17",
"svelte": "^5.2.9"
}
}

2
examples/starlog/package.json
View file

@ -10,7 +10,7 @@
"astro": "astro"
},
"dependencies": {
"astro": "^4.16.16",
"astro": "^4.16.17",
"sass": "^1.81.0",
"sharp": "^0.33.3"
}

2
examples/toolbar-app/package.json
View file

@ -15,7 +15,7 @@
"./app": "./dist/app.js"
},
"devDependencies": {
"astro": "^4.16.16",
"astro": "^4.16.17",
"@types/node": "^18.17.8"
}
}

2
examples/with-markdoc/package.json
View file

@ -12,6 +12,6 @@
},
"dependencies": {
"@astrojs/markdoc": "^0.11.5",
"astro": "^4.16.16"
"astro": "^4.16.17"
}
}

2
examples/with-mdx/package.json
View file

@ -13,7 +13,7 @@
"dependencies": {
"@astrojs/mdx": "^3.1.9",
"@astrojs/preact": "^3.5.4",
"astro": "^4.16.16",
"astro": "^4.16.17",
"preact": "^10.25.0"
}
}

2
examples/with-nanostores/package.json
View file

@ -13,7 +13,7 @@
"dependencies": {
"@astrojs/preact": "^3.5.4",
"@nanostores/preact": "^0.5.2",
"astro": "^4.16.16",
"astro": "^4.16.17",
"nanostores": "^0.11.3",
"preact": "^10.25.0"
}

2
examples/with-tailwindcss/package.json
View file

@ -14,7 +14,7 @@
"@astrojs/mdx": "^3.1.9",
"@astrojs/tailwind": "^5.1.2",
"@types/canvas-confetti": "^1.6.4",
"astro": "^4.16.16",
"astro": "^4.16.17",
"autoprefixer": "^10.4.20",
"canvas-confetti": "^1.9.3",
"postcss": "^8.4.49",

2
examples/with-vitest/package.json
View file

@ -12,7 +12,7 @@
"test": "vitest"
},
"dependencies": {
"astro": "^4.16.16",
"astro": "^4.16.17",
"vitest": "^2.1.6"
}
}

6
packages/astro/CHANGELOG.md
View file

@ -1,5 +1,11 @@
# astro
## 4.16.17
### Patch Changes
- [#12632](https://github.com/withastro/astro/pull/12632) [`e7d14c3`](https://github.com/withastro/astro/commit/e7d14c374b9d45e27089994a4eb72186d05514de) Thanks [@ematipico](https://github.com/ematipico)! - Fixes an issue where the `checkOrigin` feature wasn't correctly checking the `content-type` header
## 4.16.16
### Patch Changes

2
packages/astro/package.json
View file

@ -1,6 +1,6 @@
{
"name": "astro",
"version": "4.16.16",
"version": "4.16.17",
"description": "Astro is a modern site builder with web best practices, performance, and DX front-of-mind.",
"type": "module",
"author": "withastro",

8
packages/astro/src/core/app/middlewares.ts
View file

@ -21,7 +21,7 @@ const FORM_CONTENT_TYPES = [
export function createOriginCheckMiddleware(): MiddlewareHandler {
return defineMiddleware((context, next) => {
const { request, url } = context;
if (request.method === "GET") {
if (request.method === 'GET') {
return next();
}
const sameOrigin =
@ -30,8 +30,8 @@ export function createOriginCheckMiddleware(): MiddlewareHandler {
request.method === 'PATCH' ||
request.method === 'DELETE') &&
request.headers.get('origin') === url.origin;
const hasContentType = request.headers.has('content-type')
const hasContentType = request.headers.has('content-type');
if (hasContentType) {
const formLikeHeader = hasFormLikeHeader(request.headers.get('content-type'));
if (formLikeHeader && !sameOrigin) {
@ -47,7 +47,7 @@ export function createOriginCheckMiddleware(): MiddlewareHandler {
}
}
return next()
return next();
});
}

9
packages/astro/test/csrf-protection.test.js
View file

@ -48,17 +48,20 @@ describe('CSRF origin check', () => {
assert.equal(response.status, 403);
request = new Request('http://example.com/api/', {
headers: { origin: 'http://loreum.com', 'content-type': 'application/x-www-form-urlencoded; some-other-value' },
headers: {
origin: 'http://loreum.com',
'content-type': 'application/x-www-form-urlencoded; some-other-value',
},
method: 'POST',
});
response = await app.render(request);
assert.equal(response.status, 403);
request = new Request('http://example.com/api/', {
headers: { origin: 'http://loreum.com', },
headers: { origin: 'http://loreum.com' },
method: 'POST',
credentials: 'include',
body: new Blob(["a=b"],{})
body: new Blob(['a=b'], {}),
});
response = await app.render(request);
assert.equal(response.status, 403);

48
pnpm-lock.yaml generated
View file

@ -142,7 +142,7 @@ importers:
examples/basics:
dependencies:
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/blog:
@ -157,13 +157,13 @@ importers:
specifier: ^3.2.1
version: link:../../packages/integrations/sitemap
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/component:
devDependencies:
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/container-with-vitest:
@ -172,7 +172,7 @@ importers:
specifier: ^3.6.3
version: link:../../packages/integrations/react
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
react:
specifier: ^18.3.1
@ -203,7 +203,7 @@ importers:
specifier: ^3.14.3
version: 3.14.3
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/framework-lit:
@ -215,7 +215,7 @@ importers:
specifier: ^0.2.1
version: 0.2.1
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
lit:
specifier: ^3.2.1
@ -245,7 +245,7 @@ importers:
specifier: ^18.3.1
version: 18.3.1
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
preact:
specifier: ^10.25.0
@ -275,7 +275,7 @@ importers:
specifier: ^1.3.0
version: 1.3.0(preact@10.25.0)
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
preact:
specifier: ^10.25.0
@ -293,7 +293,7 @@ importers:
specifier: ^18.3.1
version: 18.3.1
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
react:
specifier: ^18.3.1
@ -308,7 +308,7 @@ importers:
specifier: ^4.4.4
version: link:../../packages/integrations/solid
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
solid-js:
specifier: ^1.9.3
@ -320,7 +320,7 @@ importers:
specifier: ^6.0.2
version: link:../../packages/integrations/svelte
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
svelte:
specifier: ^5.2.9
@ -332,7 +332,7 @@ importers:
specifier: ^4.5.3
version: link:../../packages/integrations/vue
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
vue:
specifier: ^3.5.13
@ -344,25 +344,25 @@ importers:
specifier: ^8.3.4
version: 8.3.4(astro@packages+astro)
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/integration:
devDependencies:
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/minimal:
dependencies:
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/portfolio:
dependencies:
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/ssr:
@ -374,7 +374,7 @@ importers:
specifier: ^6.0.2
version: link:../../packages/integrations/svelte
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
svelte:
specifier: ^5.2.9
@ -383,7 +383,7 @@ importers:
examples/starlog:
dependencies:
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
sass:
specifier: ^1.81.0
@ -398,7 +398,7 @@ importers:
specifier: ^18.17.8
version: 18.19.50
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/with-markdoc:
@ -407,7 +407,7 @@ importers:
specifier: ^0.11.5
version: link:../../packages/integrations/markdoc
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
examples/with-mdx:
@ -419,7 +419,7 @@ importers:
specifier: ^3.5.4
version: link:../../packages/integrations/preact
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
preact:
specifier: ^10.25.0
@ -434,7 +434,7 @@ importers:
specifier: ^0.5.2
version: 0.5.2(nanostores@0.11.3)(preact@10.25.0)
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
nanostores:
specifier: ^0.11.3
@ -455,7 +455,7 @@ importers:
specifier: ^1.6.4
version: 1.6.4
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
autoprefixer:
specifier: ^10.4.20
@ -473,7 +473,7 @@ importers:
examples/with-vitest:
dependencies:
astro:
specifier: ^4.16.16
specifier: ^4.16.17
version: link:../../packages/astro
vitest:
specifier: ^2.1.6