content-disposition

This release switches to ESM only.

Changed

• Export package as ESM (#141)

• Reject invalid percent-encoding in ISO-8859-1 ext-value (#138)

• Skip duplicate parameter in extended format (#144)

  • If you were previously using format with extended: true but including both param and param*, it now ignores param and uses param* when it would otherwise encode. The behavior of extended: false is the same as before, both params will be included.

Fixed

• Use first extended param (#136) fad11ba

• Update RFC references (#134) a43fd35

• Allow empty param values in quoted text (#133) 5d5d71c

v2.0.0...v2.0.1

Large refactor to make the parser 3x faster and lenient on input. Removes the default export and renames it to create.

import { create, parse, format } from 'content-disposition';

create('filename');

parse(
  'attachment; filename="EURO rates.txt"; filename*=UTF-8\'\'%e2%82%ac%20rates.txt',
);

format({
  type: 'attachment',
  parameters: {
    filename: '€ rates.txt',
  },
});

Adds a multipart option that can be used to parse the header within multipart/form-data appropriately.

Note: The filename in create is no longer normalized with basename, ensure you are using appropriate filenames and not exposing your directory structure by using absolute paths.

Changed

• Rename exports (#123) ec3a844

  • No default export, use create export instead

• Removed basename from create, pass a filename instead of a full path

• Refactor parser to be faster and lenient (e.g. now parses unicode)

  • Make the parser lenient (#125) 994f665

• Change filename in create to ASCII only (#132) 3190b76

• Null object performance bump (#124) 7c7c9c0

• Remove fallback behavior from decoder (#127) 7086236

  • Invalid UTF-8 is no longer supported

• Refactor project to TypeScript (#118) 4fbf7ff

Added

• Expose format method (#129) 2bb7da3

• Allow extended parsing to be disabled (#130) c6b15c8

• Add HTML multipart behavior compatibility (#131) 3d217fb

v1.1.0...v2.0.0

Changed

• Make the package usable in all JavaScript environments

  • Use decodeURIComponent for UTF-8 decoding (#115) dffa489

  • Remove dependency on node:path (#68) a6c8142

v1.0.1...v1.1.0

What's Changed

• Remove dependency safe-buffer

• breaking

  Update package.json engines field to reflect minimum supported node version

• Fix badges

• Replace var with const in example code

• Replace mocha and nyc with native node test runner and c8

Breaking Changes

• breaking

  Drop support to node <18 versions #50

What's Changed

• Fix CI GH action

• Add OSSF scorecard pipeline

• Replace deprecated String.prototype.substr()

• Support decode 'utf8' (no dash)

• 1.x Staging PR