Daphne

Latest version: v4.1.2

Safety actively analyzes 682387 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 3 of 10

2.2.4

Not secure
------------------

* No longer listens on port 8000 when a file descriptor is provided with --fd

* Fixed a memory leak with WebSockets

2.2.3

Not secure
------------------

* Enforce that response headers are only bytestrings, rather than allowing
unicode strings and coercing them into bytes.

* New command-line options to set proxy header names: --proxy-headers-host and
--proxy-headers-port.

2.2.2

Not secure
------------------

* X-Forwarded-Proto support is now present and enabled if you turn on the
--proxy-headers flag

* ASGI applications are no longer instantiated in a thread (the ASGI spec
was finalised to say all constructors must be non-blocking on the main thread)

2.2.1

Not secure
------------------

* Python 3.7 compatability is flagged and ensured by using Twisted 18.7 and
above as a dependency.

* The send() awaitable in applications no longer blocks if the connection is
closed.

* Fixed a race condition where applications would be cleaned up before they
had even started.

2.2.0

Not secure
------------------

* HTTP timeouts have been removed by default, as they were only needed
with ASGI/Channels 1. You can re-enable them with the --http-timeout
argument to Daphne.

* Occasional errors on application timeout for non-fully-opened sockets
and for trying to read closed requests under high load are fixed.

* X-Forwarded-For headers are now correctly decoded in all environments
and no longer have unicode matching issues.

2.1.2

Not secure
------------------

* Fixed spurious errors caused by websockets disconnecting before their
application was instantiated.

* Stronger checking for type-safety of headers as bytestrings

Page 3 of 10

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.