Closed greenkeeper[bot] closed 7 years ago
Update to this version instead π
disableHostCheck
to schemaUpdate to this version instead π
Don't provide a SSL cert, but generate one on demand. Unique for each developer.
https://medium.com/@mikenorth/961572624c54 by Mike North
allowedHosts
optionopenPage
option to open a specific page--bonjour
lan
option, which listen on lan ip by defaultThe new version differs by 11 commits.
bbcdca7
2.5.0
7b3a42a
Add 'lan' option (modify the option name to βuseLocalIpβ for more semantic) (#901)
8d5f252
replace console.log with internal log function (#856)
c9fe53d
zeroconf dns (bonjour) service publishing (#930)
14d77a5
Adding page argument to the Open option (#917)
2ca97dd
Strongly check client isn't running on WebWorker for sendMsg (#929)
ab889c3
Add 'allowedHosts' option (#899)
1a26ab4
fix #752: allow --port 0 again (#918)
9a7693c
Merge pull request #942 from webpack/ssl-path
25e1098
updating https docs
400b289
generate ssl certs per instance
See the full diff
Update to this version instead π
The new version differs by 10 commits ahead by 10, behind by 1.
adc9a0d
2.6.0
6da2f38
Set HMR log level. (#926)
140da45
Don't output startup info if quiet is set to true (#970)
9188878
Added cli option --disable-host-check
(#980)
b97dc5e
Only load bonjour when needed (#958)
e5b6202
Do not show warnings @ overlay unless explicitly set (#881)
a7fdb06
Fix typo in https docs (#952)
be1af21
Update README.md (#963)
bd22dce
Browser console messages should respect clientLogLevel (#921)
2041b11
Updated sockjs-client to 1.1.4 (#975)
See the full diff
Update to this version instead π
loglevel
from devDependencies to dependencies #1001Update to this version instead π
The new version differs by 6 commits.
62a46a5
2.7.0
ccd113a
Sockjs prefix config (#911)
1cf4359
add --allowed-hosts CLI option (#1012)
72efaab
Always allow requests with IP-address as host in checkHost() (#1007)
628f0a2
Fully mute output info if quiet is set to true. (#999)
8207238
Set undefined openPage to empty string when open option is true (#973)
See the full diff
Update to this version instead π
The new version differs by 17 commits.
0df1fa7
2.8.0
ccef0d1
Print webpack progress to browser console (#1063)
d3a650f
include subjectAltName
field in self-signed cert (#987)
e519cf2
Add feature to disable hotReloading with query string (#1068)
f166177
Fixes issue #1064 by switching to a named logger (#1070)
f00fcb3
Allow --open option to specify the browser to use (#825)
cf5dda8
improving requestCert description
2b760f6
Merge branch 'dbk91-request_cert_support'
11a3e63
Merge branch 'request_cert_support' of https://github.com/dbk91/webpack-dev-server into dbk91-request_cert_support
0fa8fea
Fix Broken Socket on Client for Custom/Random Port Numbers (#1060)
1201ac1
addresses #998 to properly assign a random port and access the port assigned (#1054)
69239ce
Cleanup Effort (#1058)
e6ccbaf
No longer generating ssl cert when one is already specified (#1036)
0b4729f
Proposed fix for ./log module not found (#1050)
b2cf847
fixes #1042: overlay doesn't clear if errors are fixed but warnings remain (#1043)
There are 17 commits in total.
See the full diff
Update to this version instead π
The new version differs by 5 commits.
e8cbdad
2.8.1 + package-lock.json
e5dc236
fixes #1081, closes #1079. addDevServerEndpoints needs app stub for
e61972a
fixes #1080 - jQuery update caused live bundle iframe issue
6e1a466
removing errant console.log, update lint rules
c7d2c9d
clean up progress option typo and options def
See the full diff
Version 2.4.3 of webpack-dev-server just got published.
The version 2.4.3 is not covered by your current version range.
Without accepting this pull request your project will work just like it did before. There might be a bunch of new features, fixes and perf improvements that the maintainers worked on for you though.
I recommend you look into these changes and try to get onto the latest version of webpack-dev-server. Given that you have a decent test suite, a passing build is a strong indicator that you can take advantage of these changes by merging the proposed change into your project. Otherwise this branch is a great starting point for you to work on the update.
Release Notes
v2.4.3Security fix:
This version contains a security fix, which is also breaking change if you have an insecure configuration.
We are releasing this breaking change as patch version to protect you from attacks.
Sorry if this breaks your setup, but the fix is easy.
We added a check for the correct
Host
header to the webpack-dev-server.This allowed evil websites to access your assets.
The
Host
header of the request have to match the listening adress or the host provided in thepublic
option.Make sure to provide correct values here.
The response will contain a note when using an incorrect
Host
header.For usage behind a Proxy or similar setups we also added a
disableHostCheck
option to disable this check.Only use it when you know what you do. Not recommended.
This version also includes this security fix for webpack-dev-middleware: https://github.com/webpack/webpack-dev-middleware/releases/tag/v1.10.2
Note: This only affect the development server and middleware. webpack and built bundles are not affected.
Bugfixes:
Host
doesn't match listening host orpublic
option.localhost
or127.0.0.1
are not blocked.Features:
disableHostCheck
option to disable the host checkCommits
The new version differs by 259 commits ahead by 259, behind by 39.
ca93284
2.4.3
f3a4ac6
Merge branch 'security/host-check'
8db5fd5
Require a secure webpack-dev-middleware version
2957853
enable Host header check for all requests and sockets
60e4727
2.4.2
32adae3
Added beforeunload check to index.js (#544) (#841)
d69559a
Handle external upgrade for all websocket proxies (#843)
35a44d1
Remove Node.js v7 warning
d2f579c
Support for array of contentBase (#832)
aabeeaa
Remove unnecessary logging of closing the dev-server
1dc9461
Fix to share proxy option between proxy settings when the proxy option is a same object (#836)
42cd23c
Explicitely but gracefully handle SIGINT and SIGTERM signals. (#787)
85de417
Use arrow function if it possible and get rid of .bind in server part (#835)
234294a
Add unit tests for proxy options (#834)
8d4b826
add codecov
There are 250 commits in total.
See the full diff
Not sure how things should work exactly?
There is a collection of [frequently asked questions](https://greenkeeper.io/faq.html) and of course you may always [ask my humans](https://github.com/greenkeeperio/greenkeeper/issues/new).Your Greenkeeper Bot :palm_tree: