Hypercorn

Latest version: v0.17.3

Safety actively analyzes 640549 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 6 of 10

0.8.1

Not secure
----------------

* Bugfix make unix socket ownership and mask optional, fixing a
Windows bug.

0.8.0

Not secure
----------------

* Support HTTP/2 prioritisation, thereby ensuring Hypercorn sends data
according to the client's priorisation.
* Support HTTP/3 as an optional extra (``pip install hypercorn[h3]``).
* Support WebSockets over HTTP/3.
* Remove worker class warnings when using serve.
* Add a shutdown_trigger argument to serve functions.
* Add the ability to change permissions and ownerships of unix sockets.
* Bugfix ensure ASGI http response headers is an optional field.
* Bugfix set the version to ``2`` rather than ``2.0`` in the scope.
* Bugfix Catch ClosedResourceError as well and close.
* Bugfix fix KeyError in close_stream.
* Bugfix catch and ignore OSErrors when setting up a connection.
* Bugfix ensure a closure code is sent with the WebSocket ASGI
disconnect message.
* Bugfix WinError 10022 Invalid argument to allow multiple workers on
Windows.
* Bugfix handle logger targets equal to None.
* Bugfix don't send empty bytes (eof) to protocols.

0.7.2

Not secure
----------------

* Bugfix only delete the H2 stream if present.
* Bugfix change the h2 closed routine to avoid a dictionary changed
size during iteration error.
* Bugfix move the trio socket address parsing within the try-finally
(as the socket can immediately close after/during the ssl
handshake).
* Bugfix handle ASGI apps ending prematurely.
* Bugfix shield data sending in Trio worker.

0.7.1

Not secure
----------------

* Bugfix correct the request duration units.
* Bugfix ensure disconnect messages are only sent once.
* Bugfix correctly handle client disconnection.
* Bugfix ensure the keep alive timeout is updated.
* Bugfix don't pass None to the wsproto connection.
* Bugfix correctly handle server disconnections.
* Bugfix specify header encoding.
* Bugfix HTTP/2 stream closing issues.
* Bugfix send HTTP/2 push promise frame sooner.
* Bugfix HTTP/2 stream closing issues.

0.7.0

Not secure
----------------

* Switch from pytoml to toml as the TOML dependency.
* Bump minimum supported Trio version to 0.11.
* Structually refactor the codebase. This is a large change that aims
to simplify the codebase and hence make Hypercorn much more
robust. It may result in lower performance (please open an issue if
so), it should result in less runtime errors.
* Support raw_path in the scope.
* Remove support for the older NPN protocol negotiation.
* Remove the `--uvloop` argument, use `-k uvloop` instead.
* Rationalise the logging settings based on Gunicorn. This makes
Hypercorn match the Gunicorn logging settings, at the cost of
deprecating `--access-log` and `--error-log` replacing with
`--access-logfile` and `--error-logfile`.
* Set the default error log (target) to `-` i.e. stderr. This means
that by default Hypercorn logs messages.
* Log the bindings after binding. This ensures that when binding to
port 0 (random port) the logged message is the port Hypercorn bound
to.
* Support literal IPv6 addresses (square brackets).
* Allow the addtion server header to be prevented.
* Add the ability to log metrics to statsd. This follows Gunicorn with
the naming and which metrics are logged.
* Timeout the close handshake in WebSocket connections.
* Report the list of binds on trio worker startup.
* Allow a subclass to decide how and where to load certificates for a
SSL context.
* Bugfix HTTP/2 flow control handling.

0.6.0

Not secure
----------------

* Remove deprecated features, this renders this version incompatible
with Quart 0.6.X releases - please use the 0.5.X Hypercorn releases.
* Bugfix accept bind definitions as a single string (alongside a list
of strings).
* Add a LifespanTimeout Exception to better communicate the failure.
* Stop supporting Python 3.6, support only 3.7 or better.
* Add an SSL handshake timeout, fixing a potential DOS weakness.
* Pause reading during h11 pipelining, fixing a potential DOS weakness.
* Add the spec_version to the scope.
* Added check for supported ssl versions.
* Support ASGI 3.0, with ASGI 2.0 also supported for the time being.
* Support serving on insecure binds alongside secure binds, thereby
allowing responses that redirect HTTP to HTTPS.
* Don't propagate access logs.

Page 6 of 10

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.