Releases: mccutchen/go-httpbin
v2.7.0
What's Changed
- Build & CI updates by @mccutchen in #116
- Encode binary request bodies as bas64 data URLs by @gab1one #117
⚠️ Response format changes ⚠️
As of #117, the incoming request body for the /post
, /put
(etc) endpoints will be returned as a base64-encoded data:
URL to match the original httpbin's behavior.
Before
$ curl -sSL --data-binary @tiny.gif -H "Content-Type: image/gif" https://httpbingo.org/post | jq .data
"GIF89a\u0001\u0000\u0001\u0000�\u0000\u0000���\u0000\u0000\u0000!�\u0004\u0001\u0000\u0000\u0000\u0000,\u0000\u0000\u0000\u0000\u0001\u0000\u0001\u0000\u0000\u0002\u0002D\u0001\u0000;"
After
$ curl -sSL --data-binary @tiny.gif -H "Content-Type: image/gif" localhost:8080/post | jq .data
"data:image/gif;base64,R0lGODlhAQABAIAAAP///wAAACH5BAEAAAAALAAAAAABAAEAAAICRAEAOw=="
New Contributors
Full Changelog: v2.6.0...v2.7.0
v2.6.0
v2.5.6
What's Changed
- build: upgrade go to 1.20 by @rarkebauer in #111
New Contributors
- @rarkebauer made their first contribution in #111
Full Changelog: v2.5.5...v2.5.6
v2.5.5
What's Changed
- ci: update codecov action by @mccutchen in #110
- feat: add /dump/request endpoint by @chinaran in #109
Full Changelog: v2.5.4...v2.5.5
v2.5.4
What's Changed
- Improve tests for streaming response endpoints by @mccutchen in #105
- feat: ensure that 404 responses indicate that they originate from go-httpbin by @chinaran in #107
New Contributors
Full Changelog: v2.5.3...v2.5.4
v2.5.3
What's Changed
- More helpful error when allowed redirect domains are defined by @mccutchen in #104
Full Changelog: v2.5.2...v2.5.3
v2.5.2
What's Changed
- Refactor package main to enable testing of CLI interface by @mccutchen in #98
- Build examples during testing by @mccutchen in #99
- Make httpbin.HTTPBin implement http.Handler interface by @mccutchen in #100
- cmd: fix help output by @mccutchen in #101
- Extract option funcs and response types into separate files for clarity by @mccutchen in #102
Full Changelog: v2.5.1...v2.5.2
v2.5.1
Notable changes
The /redirect-to
endpoint will now validate the domain of the given destination URL against an allowlist if configured with the -allowed-redirect-domains
CLI argument or ALLOW_REDIRECT_DOMAINS
env var. This allows operators of public go-httpbin instances like httpbingo.org to eliminate an open redirect, as highlighted in this security advisory.
What's Changed
- Enable CodeQL security scanning by @mccutchen in #96
- Allow restricting redirect destinations by @mccutchen in #97
Full Changelog: v2.5.0...v2.5.1
v2.5.0
Notable changes
Improved compatibility with the original httpbin (thanks @anuraaga!)
- The
/anything
endpoint to support GET requests with bodies (#89) <
,>
, and&
characters in JSON responses are no longer encoded via\uXXX
escape sequences (#89)- JSON response bodies are now pretty-printed for better readability (#94)
Responses to HEAD requests no longer include a Content-Length
header
- See #94 for more context
All changes
- Add workflow to push docker images for new releases by @mccutchen in #87
- More comprehensive tests for HTTP verb endpoints by @mccutchen in #88
- Improve compatibility with httpbin for requests with bodies by @anuraaga in #89
- Disable pushes to ghcr.io on release by @mccutchen in #92
- Extract inline vars from the status handler by @mccutchen in #93
- Rework JSON serialization by @mccutchen in #94
- build: stop being clever about when to rebuild by @mccutchen in #95
New Contributors
Full Changelog: v2.4.2...v2.5.0
v2.4.2
What's Changed
- Run all tests in parallel by @mccutchen in #82
- Add
/anything
route by @matheusfm in #83 - Update golang to 1.19 by @x70b1 in #84
New Contributors
- @matheusfm made their first contribution in #83
- @x70b1 made their first contribution in #84
Full Changelog: v2.4.1...v2.4.2