yhirose
6eff49e1fb
Problem with CI test on Windows without OpenSSL ( #2323 )
...
* Fix problem with 'windows without SSL`
* Fix payload limit enforcement for requests without Content-Length on Windows
- Enable MSG_PEEK on Windows (non-SSL builds) to detect payloads without Content-Length
- Only use MSG_PEEK when payload_max_length is set to a finite value to avoid blocking
- Use read_content_without_length for actual size checking to support any payload limit
- Set 413 Payload Too Large status before rejecting oversized requests
This fixes three test cases on Windows:
- RequestWithoutContentLengthOrTransferEncoding (no payload limit)
- NoContentLengthPayloadLimit (8-byte limit)
- NoContentLengthExceeds10MB (10MB limit)
* clang-format
2026-01-10 19:23:24 -05:00
yhirose
bd95e67c23
Release v0.30.1
2026-01-09 21:35:03 -05:00
yhirose
2e2e47bab1
Merge commit from fork
...
* Ensure payload_max_length_ is respected for compressed payloads
* Fix Denial of service (DOS) using zip bomb
---------
Co-authored-by: Hritik Vijay <hey@hritik.sh >
2026-01-09 21:09:07 -05:00
seragh
59905c7f0d
Prevent redefinition of ssize_t ( #2319 )
...
On Windows cpp-httplib defines ssize_t, therefore applications needing
to define ssize_t for their own needs or are using libraries that do
require a means to avoid a possible incompatible redefinition.
Signed-off-by: Ralph Sennhauser <ralph.sennhauser@gmail.com >
2026-01-05 20:03:18 -05:00
yhirose
8d03ef1615
Fix #2318 on macOS
2026-01-02 22:28:15 -05:00
yhirose
23a1d79a66
Fix #2318
2026-01-02 20:45:01 -05:00
yhirose
781c55f120
Release v0.30.0
2025-12-31 22:19:05 -05:00
yhirose
40f7985e02
Update copyright year
2025-12-31 22:18:11 -05:00
yhirose
98048a033a
Merge commit from fork
2025-12-30 17:32:42 -05:00
yhirose
7ae794a6bf
Fix #2315
2025-12-26 16:17:43 -05:00
yhirose
b7c2f04318
Fix potential arithmatic overflow problem
2025-12-25 22:19:37 -05:00
yhirose
5304464a53
Release v0.29.0
2025-12-23 00:03:49 -05:00
yhirose
db98efee5a
Fix problem with Proxy test
2025-12-22 23:10:24 -05:00
yhirose
cdf0d33258
Fix #2301
2025-12-22 22:37:56 -05:00
Aaron Gokaslan
25688258ad
Add another missing std::move for _base_dirs vector ( #2314 )
2025-12-22 20:43:46 -05:00
Aaron Gokaslan
f0990ca96d
Use std::move for request redirection ( #2311 )
...
Prevents an additional copy
2025-12-17 12:04:37 -05:00
Aaron Gokaslan
0461cb770c
Avoid unncessary copying of request and response objects ( #2310 )
2025-12-17 12:04:17 -05:00
yhirose
51b704b902
Implement SSEClient ( #2308 )
...
* Implement SSEClient
* Fix Windows problem
2025-12-15 00:00:42 -05:00
yhirose
7eb03e81fc
Refactoring
2025-12-14 17:41:11 -05:00
Aaron Gokaslan
681d388247
Use move semantics for auth key and value ( #2306 )
2025-12-13 22:53:10 -05:00
Aaron Gokaslan
ae94d64f67
Remove another unnecessary string copy ( #2305 )
2025-12-13 22:52:26 -05:00
Aaron Gokaslan
3401877d3d
Change single char string literals to chars ( #2304 )
2025-12-13 22:52:12 -05:00
Aaron Gokaslan
bce08e62f9
Remove unnecessary copies for AcceptEntry ( #2303 )
2025-12-13 22:49:58 -05:00
Aaron Gokaslan
c23764269d
Use std::move for boundary in set_boundary method ( #2298 )
2025-12-09 22:24:33 -05:00
Aaron Gokaslan
f441cd2a44
Use std::move for content_provider in adapter ( #2297 )
2025-12-09 22:23:45 -05:00
yhirose
87c2b4e584
Fix #2294
2025-12-08 19:32:35 -05:00
yhirose
c795ad1c32
Fix #2259 . Add query string normalization to preserve parameter order in requests
2025-12-05 21:39:40 -05:00
yhirose
3e0fa33559
Implement ETag and Last-Modified support for static file responses and If-Range requests ( #2286 )
...
* Fix #2242 : Implement ETag and Last-Modified support for static file responses
* Add ETag and Last-Modified handling for If-Range requests
* Enhance HTTP date parsing with improved error handling and locale support
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update test/test.cc
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Refactor ETag handling: separate strong and weak ETag checks for If-Range requests
* Fix type for mtime in FileStat and improve ETag handling comments
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Resolved code review comments
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Refactor ETag handling: use 'auto' for type inference and improve code readability
* Refactor ETag handling: extract check_if_not_modified and check_if_range methods for improved readability and maintainability
* Code cleanup
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update test/test.cc
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Update httplib.h
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
* Enhance ETag handling and validation in httplib.h and add comprehensive tests in test.cc
* Refactor ETag comparison logic and add test for If-None-Match with non-existent file
* Fix #2287
* Code cleanup
* Add tests for extreme date values and negative file modification time in ETag handling
* Update HTTP-date parsing comments to reference RFC 9110
---------
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-12-05 18:58:54 -05:00
yhirose
27b73f050e
Fix #2287
2025-12-05 08:50:12 -05:00
yhirose
dbd5ca4bf2
Add error handling for stream read timeouts and connection closures
2025-12-04 19:19:18 -05:00
yhirose
143019a38c
Fix #2284
2025-12-02 17:24:27 -05:00
yhirose
8bba34eebc
Add New Streaming API support ( #2281 )
2025-12-01 21:40:13 -05:00
Aaron Gokaslan
0a9102ff6b
Optimize ThreadPool and MatcherBase constructors ( #2283 )
...
Add a missing reserve and missing std::move to each ctor respectively. The latter should really be caught by a clang-tidy perf linter.
2025-11-30 21:49:23 -05:00
yhirose
adf58bf474
Release v0.28.0
2025-11-25 21:06:51 -05:00
yhirose
337fbb0793
Fix #2279
...
Enhance request handling: add support for requests without Content-Length or Transfer-Encoding headers
2025-11-25 20:30:43 -05:00
Copilot
9e7861b0b4
Add #undef _res after including resolv.h to prevent macro conflicts ( #2280 )
...
* Initial plan
* Add #undef _res after including resolv.h to prevent macro conflicts
Co-authored-by: yhirose <357397+yhirose@users.noreply.github.com >
* Complete task - added #undef _res after resolv.h include
Co-authored-by: yhirose <357397+yhirose@users.noreply.github.com >
* Remove accidentally committed codeql build artifacts
Co-authored-by: yhirose <357397+yhirose@users.noreply.github.com >
* Add inline comment explaining why #undef _res is necessary
Co-authored-by: yhirose <357397+yhirose@users.noreply.github.com >
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com >
Co-authored-by: yhirose <357397+yhirose@users.noreply.github.com >
2025-11-25 20:00:10 -05:00
Clarkok Zhang
27ee115a60
Fix android getaddrinfo issue ( #2273 )
...
Co-authored-by: Clarkok Zhang <clarkok8@gmail.com >
2025-11-14 16:48:21 -05:00
Clarkok Zhang
59882752aa
Add Client::Post with both content provider and receiver ( #2268 )
...
Co-authored-by: Clarkok Zhang <clarkok8@gmail.com >
2025-11-14 14:52:06 -05:00
chansikpark
4b2b851dbb
Fix HTTP 414 errors hanging until timeout ( #2260 )
...
* Fix HTTP 414 errors hanging until timeout
* All errors (status code 400+) close the connection
* 🧹
---------
Co-authored-by: Wor Ker <worker@factory>
2025-11-02 22:23:42 -05:00
yhirose
eacc1ca98e
Release v0.27.0
2025-10-27 19:57:53 -04:00
yhirose
ac9ebb0ee3
Merge commit from fork
...
* Fix "Untrusted HTTP Header Handling (REMOTE*/LOCAL*)"
* Fix "Untrusted HTTP Header Handling (X-Forwarded-For)"
* Fix security problems in docker/main.cc
2025-10-27 19:54:12 -04:00
yhirose
11eed05ce7
Fix #2255 and #2256
2025-10-27 19:51:55 -04:00
yhirose
2d8d524178
Fix #2251
2025-10-25 22:06:42 -04:00
yhirose
afa88dbe70
Fix #2250
2025-10-25 21:36:53 -04:00
yhirose
cde29362ef
Merge branch 'ssl_error_reporting' of github.com:staticlibs/cpp-httplib into staticlibs-ssl_error_reporting
2025-10-25 19:09:09 -04:00
yhirose
bae40fcdf2
Resolve #2237
2025-10-25 16:48:45 -04:00
Alex Kasko
23ff9a5605
Fix error reporting in SSLClient
...
When the `SSLClient` is used to connect to a plain-HTTP server (which
can happen in clients due to some end-user misconfiguration) it can
return a failure from the `send()` call without setting the `Error`
reference to the corresponding error code. This can cause problems to
callers, that may expect that, when the check like this is passed on
the response:
```c++
if (res.error() == Error::Success)
```
then they can access the response contents with `res.value()`. When
`SSLClient`'s connection fails - the contents `unique_ptr` is not set
and an attemt to access it causes UB.
This change fixes the `SSLClient::create_and_connect_socket` method
making sure that, the `Error` value is set correctly when the
`is_valid()` check fails.
2025-09-18 13:44:39 +01:00
yhirose
41be1e24e3
Code cleanup
2025-09-15 07:59:53 -04:00
Jonas van den Berg
6e52d0a057
Fix UB by use of dangling references in getaddrinfo_with_timeout ( #2232 )
...
* Fix use of dangling references
When the resolve thread is detached, local variables were still used, which could lead to a program crash.
* Add test to verify dangling ref fix
* Add missing brace initialization
* Assert that the remaining fields are really zeroed
* Fix use of chrono literals
2025-09-14 20:05:09 -04:00
yhirose
89c932f313
Release v0.26.0
2025-08-29 16:05:44 -04:00
