Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v4.4.2 proposal #5961

Merged
merged 41 commits into from
Apr 1, 2016
Merged

v4.4.2 proposal #5961

merged 41 commits into from
Apr 1, 2016

Commits on Mar 30, 2016

  1. doc: updated fs #5862 removed irrelevant data in fs.markdown

    fs.readFile, fs.writeFile and fs.appendFile doc changes
    pulled back from master included details not relevant to
    v4.
    
    PR-URL: #5877
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: Michaël Zasso <mic.besace@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    ToPal authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    b70ca4a View commit details
    Browse the repository at this point in the history
  2. doc: reformat & improve node.1 manual page

    Uses better troff formatting.
    Removes v8 options from the man page.
    
    Also edits `node -h` in node.cc slightly.
    
    PR-URL: #5497
    Reviewed-By: James Snell <jasnell@gmail.com>
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Fishrock123 authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    eb0ed46 View commit details
    Browse the repository at this point in the history
  3. lib: copy arguments object instead of leaking it

    Instead of leaking the arguments object by passing it as an
    argument to a function, copy it's contents to a new array,
    then pass the array. This allows V8 to optimize the function
    that contains this code, improving performance.
    
    PR-URL: #4361
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Brian White <mscdex@mscdex.net>
    nwoltman authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    3c8e59c View commit details
    Browse the repository at this point in the history
  4. test: remove timer from test-http-1.0

    It's possible that the `end` event is emitted after the timeout fires
    causing the test to fail. Just remove the timer. If for some reason the
    `end` would never fire, the test will fail with a timeout.
    
    PR-URL: #5129
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    santigimeno authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    f209eff View commit details
    Browse the repository at this point in the history
  5. net: remove unused var self = this from old code

    Removed an unused `var self = this` that is no longer required.
    
    PR-URL: #5224
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: Evan Lucas <evanlucas@me.com>
    Reviewed-By: Sakthipriyan Vairamani <thechargingvolcano@gmail.com>
    benjamingr authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    07b7172 View commit details
    Browse the repository at this point in the history
  6. lib: reduce usage of self = this

    Remove unnecessary `self = this`.
    
    PR-URL: #5231
    Reviewed-By: James M Snell <jasnell@gmail.com>
    JacksonTian authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    108fc90 View commit details
    Browse the repository at this point in the history
  7. lib: simplify code with String.prototype.repeat()

    use String.prototype.repeat() to simplify code, less code,
    more semantically.
    
    PR-URL: #5359
    Reviewed-By: Michaël Zasso <mic.besace@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    JacksonTian authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    6daebdb View commit details
    Browse the repository at this point in the history
  8. repl: fix stack trace column number in strict mode

    On strict mode, "'use strict'; void 0; " is added as prefix
    in order to prevent "use strict" as the result value
    for let/const statements. It causes wrong column number in
    stack trace.
    
    PR-URL: #5416
    Reviewed-By: Jeremiah Senkpiel <fishrock123@rocketmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Roman Reiss <me@silverwind.io>
    princejwesley authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    acbce4b View commit details
    Browse the repository at this point in the history
  9. net: make isIPv4 and isIPv6 more efficient

    `isIPv4` and `isIPv6` are implemented on top of `isIP`, which in turn
    checks the sting for being both IPv4 and IPv6, which can be inefficient
    in some scenarios. This commit makes them use `uv_inet_pton` directly
    instead.
    
    PR-URL: #5478
    Reviewed-By: Evan Lucas <evanlucas@me.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Roman Reiss <me@silverwind.io>
    vkurchatkin authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    8648420 View commit details
    Browse the repository at this point in the history
  10. doc: fix crypto update() signatures

    PR-URL: #5500
    Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>
    mscdex authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    a6ec8a6 View commit details
    Browse the repository at this point in the history
  11. doc: update crypto docs to use good defaults

    [Diffie-Hellman](https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange#Cryptographic_explanation)
    keys are composed of a `generator` a `prime` a `secret_key`
    and the `public_key` resulting from the math operation:
    
    ```
    (generator ^ secret_key) mod prime = public_key
    ```
    
    Diffie-Hellman keypairs will compute a matching shared secret
    if and only if the generator and prime match for both
    recipients.  The generator is usually **2** and the prime is
    what is called a [Safe Prime](https://en.wikipedia.org/wiki/Safe_prime).
    
    Usually this matching is accomplished by using
    [standard published groups](http://tools.ietf.org/html/rfc3526).
    We expose access those groups with the `crypto.getDiffieHellman`
    function.
    
    `createDiffieHellman` is trickier to use.  The original example
    had the user creating 11 bit keys, and creating random groups of
    generators and primes. 11 bit keys are very very small, can be
    cracked by a single person on a single sheet of paper.  A
    byproduct of using such small keys were that it was a high
    likelihood that two calls of `createDiffieHellman(11)` would
    result in using the same 11 bit safe prime.
    
    The original example code would fail when the safe primes generated
    at 11 bit lengths did not match for alice and bob.
    
    If you want to use your own generated safe `prime` then the proper
    use of `createDiffieHellman` is to pass the `prime` and `generator`
    to the recipient's constructor, so that when they compute the shared
    secret their `prime` and `generator` match, which is fundamental to
    the algorithm.
    
    PR-URL: #5505
    Reviewed-By: Brian White <mscdex@mscdex.net>
    Reviewed-By: Fedor Indutny <fedor.indutny@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    billautomata authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    3b8fc4f View commit details
    Browse the repository at this point in the history
  12. test: repl tab completion test

    It checks that `eval` is called with `.scope` as an input string.
    
    PR-URL: #5534
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    santigimeno authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    b258ddd View commit details
    Browse the repository at this point in the history
  13. test: add test-npm-install to parallel tests suite

    Currently we are not testing that `npm install` works.
    
    This is a very naive / basic test that shells out to `npm install`
    in an empty `tempDir`. While this test will not be able to check
    that `npm install` is 100% working, it should catch certain edge
    cases that break it.
    
    PR-URL: #5166
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Alexis Campailla <orangemocha@nodejs.org>
    Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    7520100 View commit details
    Browse the repository at this point in the history
  14. test: improve test-npm-install

    Make npm install a dependency that is defined as a relative path, so it
    avoids any network interaction.
    
    PR-URL: #5613
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Claudio Rodriguez <cjrodr@yahoo.com>
    santigimeno authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    d506eea View commit details
    Browse the repository at this point in the history
  15. deps: remove unused openssl files

    Refs: #5615
    PR-URL: #5619
    Reviewed-By: Fedor Indutny <fedor@indutny.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Johan Bergström <bugs@bergstroem.nu>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    bnoordhuis authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    1d0e4a9 View commit details
    Browse the repository at this point in the history
  16. console: check that stderr is writable

    `Console` constructor checks that `stdout.write()` is a function but
    does not do an equivalent check for `stderr.write()`. If `stderr` is not
    specified in the constructor, then `stderr` is set to be `stdout`.
    However, if `stderr` is specified, but `stderr.write()` is not a
    function, then an exception is not thrown until `console.error()` is
    called.
    
    This change adds the same check for 'stderr' in the constructor that is
    there for `stdout`. If `stderr` fails the check, then a `TypeError` is
    thrown.
    
    Took the opportunity to copyedit the `console` doc a little too.
    
    PR-URL: #5635
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    Trott authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    0c6f674 View commit details
    Browse the repository at this point in the history
  17. test: add batch of known issue tests

    This commit adds tests for several known issues.
    
    Refs: #1901
    Refs: #728
    Refs: #4778
    Refs: #947
    Refs: #2734
    PR-URL: #5653
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    cjihrig authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    78effc3 View commit details
    Browse the repository at this point in the history
  18. doc: Add windows example for Path.format

    PR-URL: #5700
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Sakthipriyan Vairamani <thechargingvolcano@gmail.com>
    mithun-daa authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    bf1fe46 View commit details
    Browse the repository at this point in the history
  19. doc: fix multiline return comments in querystring

    Changes the multiline return example commments in querystring
    which have the example out-of-comment, into single comment
    lines to remain consistent with other docs.
    
    PR-URL: #5705
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    Reviewed-By: Sakthipriyan Vairamani <thechargingvolcano@gmail.com>
    claudiorodriguez authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    c0a24e4 View commit details
    Browse the repository at this point in the history
  20. https: fix ssl socket leak when keepalive is used

    SSL sockets leak whenever keep alive is enabled, ca option is set in
    the global agent, and requests are sent without the ca property.
    In the following case at Agent.prototype.createSocket a socket will
    be created with a hashtag name that includes data from the global
    agents’ ca property.
    
    On subsequent requests at Agent.prototype.addRequest we do not find
    the free socket, because the hashtag name generated there does not
    take into account the global agents’ ca property, thus creating a new
    socket and leaving the first socket to timeout. closes: #5699
    
    PR-URL: #5713
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    alexpenev-s authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    8187661 View commit details
    Browse the repository at this point in the history
  21. test: minimize test-http-get-pipeline-problem

    Reduce resoures required by test.
    
    Clarify comment explaining source of test and what the test is looking
    for.
    
    Fixes: #5725
    PR-URL: #5728
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Trott authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    7e45d4f View commit details
    Browse the repository at this point in the history
  22. test: remove the use of curl in the test suite

    There were 2 tests using curl:
    
    `test-http-304.js` is removed because it was initially included to test
    that the 304 response does not contain a body, and this is already
    covered by `test-http-chunked-304.js`.
    
    `test-http-curl-chunk-problem` has been renamed and refactored so
    instead of using curl, it uses 2 child node processes: one for sending
    the HTTP request and the other to calculate the sha1sum. Originally,
    this test was introduced to fix a bug in `nodejs@0.2.x`, and it was not
    fixed until `nodejs@0.2.5`. A modified version of this test has been run
    with `nodejs@0.2.0` and reproduces the problem. This same test has been
    run with `nodejs@0.2.6` and runs correctly.
    
    Fixes: #5174
    PR-URL: #5750
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Johan Bergström <bugs@bergstroem.nu>
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    Reviewed-By: Jeremiah Senkpiel <fishrock123@rocketmail.com>
    santigimeno authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    1b266fc View commit details
    Browse the repository at this point in the history
  23. tools: remove unused imports

    PR-URL: #5765
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    thefourtheye authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    3a901b0 View commit details
    Browse the repository at this point in the history
  24. doc: add a cli options doc page

    This page is mostly a mirror of the updated manual page.
    
    PR-URL: #5787
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: James M Snell jasnell@gmail.com>
    Reviewed-By: Bryan English <bryan@bryanenglish.com>
    Reviewed-By: Robert Lindstädt <robert.lindstaedt@gmail.com>
    Fishrock123 authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    e43e8e3 View commit details
    Browse the repository at this point in the history
  25. test: make test-net-connect-options-ipv6.js better

    Improve the robustness of test-net-connect-options-ipv6.js
    
    PPC Suse build team encountered intermittent failures related
    to dns.  Improve test to make it more robust in the face
    of intermittent dns issues.
    
    PR-URL: #5791
    Reviewed-By: James M Snell <jasnell@gmail.com>
    mhdawson authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    e57355c View commit details
    Browse the repository at this point in the history
  26. doc: explain path.format expected properties

    Explain the expected properties in path.format
    
    Fixes: #5746
    PR-URL: #5801
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    eversojk authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    79d26ae View commit details
    Browse the repository at this point in the history
  27. test: fix flaky test-cluster-shared-leak

    Test was flaky on centos7-64 due to an uncaught ECONNRESET
    on the worker code. This catches the error so the process
    will exit with code 0.
    
    Fixes: #5604
    PR-URL: #5802
    Reviewed-By: Rich Trott <rtrott@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    claudiorodriguez authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    0836d7e View commit details
    Browse the repository at this point in the history
  28. dns: use template literals

    Prefer the use of template string literals over string concatenation
    in the dns module, makes dns consistent with other modules basically
    doing #5778 for it.
    
    PR-URL: #5809
    Reviewed-By: James M Snell <jasnell@gmail.com>
    benjamingr authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    d55599f View commit details
    Browse the repository at this point in the history
  29. doc: explain error message on missing main file

    Added a hint saying that node uses the default "Cannot find module"
    error when requiring a module for which the "main" file specified in
    the package.json is missing.
    
    PR-URL: #5812
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    drywolf authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    20faf90 View commit details
    Browse the repository at this point in the history
  30. test: strip non-free icc profile from person.jpg

    Fixes: #5749
    PR-URL: #5813
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    kapouer authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    1135ee9 View commit details
    Browse the repository at this point in the history
  31. test: smaller chunk size for smaller person.jpg

    PR-URL: #5813
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Rod Vagg <rod@vagg.org>
    kapouer authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    86b876f View commit details
    Browse the repository at this point in the history
  32. test: fix test-cluster-worker-kill

    Don't check that the `disconnect` event is emitted before the `exit`
    event as the order is not guaranteed.
    
    PR-URL: #5814
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    santigimeno authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    0a1eb16 View commit details
    Browse the repository at this point in the history
  33. doc: use consistent event name parameter

    Implementing the suggestion in
    #4554 this pull request renames
    the parameter name in all the places that accept an event name as a parameter.
    
    Previously, the parameter has been called `event` or `type`. Now as suggested
    it is consistently called `eventName`.
    
    PR-URL: #5850
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: Jeremiah Senkpiel <fishrock123@rocketmail.com>
    benjamingr authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    7c83702 View commit details
    Browse the repository at this point in the history
  34. doc: fix order of end tags of list after heading

    Current html result of a list after heading is <div
    class="signature"><ul>...</div></ul>. Correct it to <div
    class="signature"><ul>...</ul></div>.
    
    PR-URL: #5874
    Fixes: #5873
    Reviewed-By: Roman Reiss <me@silverwind.io>
    firedfox authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    8c24bd2 View commit details
    Browse the repository at this point in the history
  35. buffer: changing let in for loops back to var

    Using let in for loops showed a regression in 4.4.0. @ofrobots
    suggested that we avoid using let in for loops until TurboFan becomes
    the default optimiser.
    
    The regression that was detected was when looking at how long it took
    to create a new buffer from an array of data.
    
    When using `for (let i=0; i<length; i++) ` we saw the operation take
    almost 40% longer compared to `var i=0`.
    
    PR-URL: #5819
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: Michael Dawson <michael_dawson@ca.ibm.com>
    Reviewed-By: Jeremiah Senkpiel <fishrock123@rocketmail.com>
    Reviewed-By: Trevor Norris <trevnorris@gmail.com>
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Ref: http://github.com/nodejs/benchmarking/issues/38
    gareth-ellis authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    96e163a View commit details
    Browse the repository at this point in the history
  36. doc: grammar, clarity and links in timers doc

    Added appropriate in-document links. Clarified a bit of
    `setImmediate`, including a quick grammar fix (plural possessive
    apostrophe).
    
    PR-URL: #5792
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    bengl authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    040263e View commit details
    Browse the repository at this point in the history
  37. deps: upgrade npm in LTS to 2.15.1

    PR-URL: npm#5
    Reviewed-By: Myles Borins <mborins@us.ibm.com>
    othiym23 authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    55c3f80 View commit details
    Browse the repository at this point in the history
  38. doc: add instructions to only sign a release

    PR-URL: #5876
    Reviewed-By: Myles Borins <myles.borins@gmail.com>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    Fishrock123 authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    60ddab8 View commit details
    Browse the repository at this point in the history
  39. Add @mhdawson back to the CTC

    Now that the CTC has expanded, this PR calls for a vote of the CTC
    to reinstate Michael Dawson (@mhdawson) as a full voting member.
    
    Voted on and approved by the CTC on 2016-03-23
    
    PR-URL: #5633
    Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
    Reviewed-By: Alexis Campailla <orangemocha@nodejs.org>
    Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
    jasnell authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    42bbdc9 View commit details
    Browse the repository at this point in the history
  40. doc: typo: interal->internal.

    Fixes a copy typo in the events.md docs.
    
    PR-URL: #5849
    Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
    Reviewed-By: James M Snell <jasnell@gmail.com>
    kosak authored and Myles Borins committed Mar 30, 2016
    Configuration menu
    Copy the full SHA
    8d86d23 View commit details
    Browse the repository at this point in the history

Commits on Mar 31, 2016

  1. 2016-03-31, Version v4.4.2 'Argon' (LTS)

    Notable Changes
    
    * https:
      - Under certain conditions ssl sockets may have been causing a memory
      leak when keepalive is enabled. This is no longer the case.
        - (Alexander Penev) #5713
    
    * lib:
      - The way that we were internally passing arguments was causing a
      potential leak. By copying the arguments into an array we can avoid this
        - (Nathan Woltman) #4361
    
    * npm:
      - Upgrade to v2.15.1. Fixes a security flaw in the use of authentication
      tokens in HTTP requests that would allow an attacker to set up a server
      that could collect tokens from users of the command-line interface.
      Authentication tokens have previously been sent with every request made
      by the CLI for logged-in users, regardless of the destination of the
      request. This update fixes this by only including those tokens for
      requests made against the registry or registries used for the current
      install. (Forrest L Norvell)
    
    * repl:
      - Previously if you were using the repl in strict mode the column number
      would be wrong in a stack trace. This is no longer an issue.
        - (Prince J Wesley) #5416
    
    PR-URL: #5961
    Myles Borins committed Mar 31, 2016
    Configuration menu
    Copy the full SHA
    9ef4b1b View commit details
    Browse the repository at this point in the history