engine.io - npm Package Compare versions

Comparing version 6.6.7 to 6.6.8

build/server.js

@@ -57,4 +57,3 @@ "use strict";
                 path: "/",
-                // @ts-ignore
-                httpOnly: opts.cookie.path !== false,
+                httpOnly: true,
                 sameSite: "lax",
@@ -337,2 +336,3 @@ }, opts.cookie);
         if (result.done) {
+            clearTimeout(timeout);
             debug("session is closed");
@@ -344,12 +344,23 @@ return;
         const reader = stream.readable.pipeThrough(transformStream).getReader();
+        const closeSession = async () => {
+            try {
+                await reader.cancel();
+            }
+            catch (e) {
+                debug("error while canceling WebTransport stream reader: %s", e.message);
+            }
+            reader.releaseLock();
+            session.close();
+        };
         // reading the first packet of the stream
         const { value, done } = await reader.read();
+        clearTimeout(timeout);
         if (done) {
             debug("stream is closed");
+            reader.releaseLock();
             return;
         }
-        clearTimeout(timeout);
         if (value.type !== "open") {
             debug("invalid WebTransport handshake");
-            return session.close();
+            return closeSession();
         }
@@ -374,3 +385,3 @@ if (value.data === undefined) {
             debug("invalid WebTransport handshake");
-            return session.close();
+            return closeSession();
         }
@@ -380,11 +391,11 @@ const client = this.clients[sid];
             debug("upgrade attempt for closed client");
-            session.close();
+            return closeSession();
         }
         else if (client.upgrading) {
             debug("transport has already been trying to upgrade");
-            session.close();
+            return closeSession();
         }
         else if (client.upgraded) {
             debug("transport had already been upgraded");
-            session.close();
+            return closeSession();
         }
@@ -391,0 +402,0 @@ else {

package.json

 {
   "name": "engine.io",
-  "version": "6.6.7",
+  "version": "6.6.8",
   "description": "The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server",
@@ -43,3 +43,3 @@ "type": "commonjs",
     "engine.io-parser": "~5.2.1",
-    "ws": "~8.18.3"
+    "ws": "~8.20.1"
   },
@@ -46,0 +46,0 @@ "scripts": {

No alert changes

Improved metrics

Total package byte prevSize

169921

0.21%

Lines of code

4531

0.24%

Dependency changes

• + Added

  ws@8.20.1
  (transitive)

• - Removed

  ws@8.18.3
  (transitive)

• Updated

  ws@~8.20.1