content-disposition
3.0.0 · 13 Aug 2026MIT211.4M / weekRepositoryHomepagenpmAtom feed
Where each line stands
Plan an upgradeLatest releases
- 3.x · latest line
3.0.0
13 Aug 2026Export package as ESM (#141)
Reject invalid percent-encoding in ISO-8859-1 ext-value (#138)
Skip duplicate parameter in extended format (#144)
This release switches to ESM only.
Changed
Export package as ESM (#141)
Reject invalid percent-encoding in ISO-8859-1 ext-value (#138)
Skip duplicate parameter in extended format (#144)
If you were previously using
formatwithextended: truebut including bothparamandparam*, it now ignoresparamand usesparam*when it would otherwise encode. The behavior ofextended: falseis the same as before, both params will be included.
- 2.x · maintenance
2.0.0
11 May 2026Removed
basenamefromcreate, pass a filename instead of a full pathRefactor parser to be faster and lenient (e.g. now parses unicode)
Large refactor to make the parser 3x faster and lenient on input. Removes the default export and renames it to
create.import { create, parse, format } from 'content-disposition'; create('filename'); parse( 'attachment; filename="EURO rates.txt"; filename*=UTF-8\'\'%e2%82%ac%20rates.txt', ); format({ type: 'attachment', parameters: { filename: '€ rates.txt', }, });Adds a
multipartoption that can be used to parse the header withinmultipart/form-dataappropriately.Note: The filename in
createis no longer normalized withbasename, ensure you are using appropriate filenames and not exposing your directory structure by using absolute paths.Changed
No default export, use
createexport instead
Removed
basenamefromcreate, pass a filename instead of a full pathRefactor parser to be faster and lenient (e.g. now parses unicode)
Remove fallback behavior from decoder (#127) 7086236
Invalid UTF-8 is no longer supported
Added
Dependency tracking · free for 3 projects
Know when your own dependencies move
content-disposition shipped 2 new majors in the last 12 months, among 5 releases. inlinr shows which of your projects are behind, and what the upgrade breaks.
Advisories reach you
An email when a critical or high advisory affects a project, before the next install.
Upgrades checked first
Peer ranges, Node, ESM-only and types changes read before you bump.
Only what matters
Majors and breaking notes stay; patches and sibling bumps fold into one line.
Reading releases, release notes and advisories…
Registry facts last checked 4 Nov 2026. Releases and advisories last read 4 Nov 2026.