@remix-run/server-runtime - npm Package Compare versions

Comparing version 2.17.4 to 2.17.5

dist/actions.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/cookies.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/data.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/deprecations.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/dev.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/entry.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/errors.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/actions.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/cookies.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/data.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/deprecations.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/dev.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/entry.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/errors.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/formData.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/headers.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/index.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/invariant.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/markup.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/mode.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/responses.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/routeMatching.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/routes.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/server.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -104,3 +104,3 @@ * Copyright (c) Remix Software Inc.
     let manifestUrl = `${_build.basename ?? "/"}/__manifest`.replace(/\/+/g, "/");
-    if (url.pathname === manifestUrl) {
+    if (url.pathname === manifestUrl && _build.future.v3_lazyRouteDiscovery) {
       try {
@@ -189,2 +189,12 @@ let res = await handleManifestRequest(_build, routes, url);
   }
+
+  // 7.5k to come in under the ~8k limit for most browsers
+  // https://stackoverflow.com/a/417184
+  let URL_LIMIT = 7680;
+  if (url.toString().length > URL_LIMIT) {
+    return new Response(null, {
+      statusText: "Bad Request",
+      status: 400
+    });
+  }
   let patches = {};
@@ -312,3 +322,3 @@ if (url.searchParams.has("p")) {
   try {
-    if (request.method === "POST") {
+    if (["POST", "PUT", "PATCH", "DELETE"].includes(request.method)) {
       throwIfPotentialCSRFAttack(request.headers);
@@ -315,0 +325,0 @@ }

dist/esm/serverHandoff.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/sessions.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/sessions/cookieStorage.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/sessions/memoryStorage.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/single-fetch.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/upload/errors.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/upload/memoryUploadHandler.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/esm/warnings.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/formData.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/headers.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/index.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/invariant.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/markup.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/mode.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/responses.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/routeMatching.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/routes.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/server.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -108,3 +108,3 @@ * Copyright (c) Remix Software Inc.
     let manifestUrl = `${_build.basename ?? "/"}/__manifest`.replace(/\/+/g, "/");
-    if (url.pathname === manifestUrl) {
+    if (url.pathname === manifestUrl && _build.future.v3_lazyRouteDiscovery) {
       try {
@@ -193,2 +193,12 @@ let res = await handleManifestRequest(_build, routes, url);
   }
+
+  // 7.5k to come in under the ~8k limit for most browsers
+  // https://stackoverflow.com/a/417184
+  let URL_LIMIT = 7680;
+  if (url.toString().length > URL_LIMIT) {
+    return new Response(null, {
+      statusText: "Bad Request",
+      status: 400
+    });
+  }
   let patches = {};
@@ -316,3 +326,3 @@ if (url.searchParams.has("p")) {
   try {
-    if (request.method === "POST") {
+    if (["POST", "PUT", "PATCH", "DELETE"].includes(request.method)) {
       actions.throwIfPotentialCSRFAttack(request.headers);
@@ -319,0 +329,0 @@ }

dist/serverHandoff.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/sessions.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/sessions/cookieStorage.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/sessions/memoryStorage.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/single-fetch.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/upload/errors.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/upload/memoryUploadHandler.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

dist/warnings.js

 /**
- * @remix-run/server-runtime v2.17.4
+ * @remix-run/server-runtime v2.17.5
  *
@@ -4,0 +4,0 @@ * Copyright (c) Remix Software Inc.

package.json

 {
   "name": "@remix-run/server-runtime",
-  "version": "2.17.4",
+  "version": "2.17.5",
   "description": "Server runtime for Remix",
@@ -19,3 +19,3 @@ "bugs": {
   "dependencies": {
-    "@remix-run/router": "1.23.2",
+    "@remix-run/router": "1.23.3",
     "@types/cookie": "^0.6.0",
@@ -22,0 +22,0 @@ "@web3-storage/multipart-parser": "^1.0.0",

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

282383

0.24%

Lines of code

5453

0.33%

Dependency changes

• + Added

  @remix-run/router@1.23.3
  (transitive)

• - Removed

  @remix-run/router@1.23.2
  (transitive)

• Updated

  @remix-run/router@1.23.3