• Update url-parse due to CVE-2021-3664.

• Update url-parse due to CVE-2021-27515.

• Update url-parse, kind-of, minimist, websocket-extensions due to security vulnerabilies.
• Update dev dependencies.
• Allow loopback address hostnames on a secure page. Fixes #486
• Enable eventsource transport for node.js clients.

• Add timeout option to set a minimum transport timeout. Fixes #403
• Update dev deps to fix security warnings from npm audit
• Guard against null this._transport in debug statement. Fixes #448

• Revert debug to ^3 because v4 starts using ES6. Fixes #457

• Update all outdated dependencies
• Switch to karma and browserstack for running automated browser tests

• Wrap the the contentWindow access in a try/catch block when in setTimeout #363
• Revised example in README #356
• Fix connection close when Transport timeout #358
• Fixed crash with react-native@0.45.1 on Android #386
• Update jsDelivr link #404, #405
• Remove Sauce Labs unsupported browsers
• Add link to rust server implementation #411
• location.protocol should include final : #396

• Upgrade debug and fix object key literal mangling, fixes regression in Opera 11.10 #359
• Trim descriptions in package.json and bower.json - #372

• Simplify url handling by delegating to url-parse - #242
• Upgrade to url-parse 1.0.1 to fix colon issue if auth has no password

1.0.0-beta.13

• Transport timeout on connection should fallback - #238

1.0.0-beta.12

• Upgrade url-parse to 1.0.0 to fix #218 again

1.0.0-beta.10

• Upgrade url-parse to 0.2.3 to fix #222

1.0.0-beta.9

• Upgrade url-parse to 0.2.1 to fix 'too much recursion' errors

1.0.0-beta.8

• Upgrade url-parse to 0.2.0 to fix inheritance issues

1.0.0-beta.7

• Upgrade url-parse to 0.1.5 to fix #218
• Don't strip basic auth from url - #219

1.0.0-beta.6

• Upgrade url-parse to 0.1.3 to avoid CSP issues

1.0.0-beta.5

• Upgrade url-parse to 0.1.1 to fix #214

1.0.0-beta.4

• Upgrade url-parse to 0.1.0 and sockjs to 0.3.11
• Update .npmignore

1.0.0-beta.3

• Move debug from devDependencies to dependencies

1.0.0-beta.2

• Relax requirements when using same origin XHR - #80
• Upgrade to JSON3 from JSON2 - #123
• Package library with browserify supporting the UMD pattern - #184
• Move tests to JavaScript
• Add Gulp.js build script
• Fix getOrigin for file:/// urls and standard ports - #173
• Add onerror event handlers to Websockets - #169
• Increase RTO lower bound to prevent spurious timeouts on IE8/9 - #161
• Use window.crypto for random values when available - #128
• Fix handling of listeners added and removed mid-dispatch - #127
• Fix XHR Streaming for IE8 - #83
• Remove explicit AMD name - #107
• Check for an empty response from /info request - #143
• Add Content-Type to XHR requests to fix issue over HTTPS on Galaxy S4 - #164
• Fix iframe fallback when message is sent from a popup in IE7/8 - #166
• Add support for query strings on the url - #72
• Now works inside of Web Workers - #181
• Support EventSource / Server Sent Events outside of iframes - #201
• Rename protocols to transports - #65
• Allow transports which need the body to trigger on 'interactive' readyState - #175
• try/catch access to document.domain - #187
• Use window.location instead of document.location - #195
• Allow usage from node.js with same API

• #29 - Allow all unicode characters to be send over SockJS.
• #15 - SockJS should now work fine even if the connection is started in HEAD, before BODY is loaded.
• #28 - In rare circumstances WebSocket connection can be left intact after the page is unloaded in FireFox.
• Updated scripts to work with Node 0.6.
• Initial work to do better QUnit testing.
• Updated the minifying script (always escape unicode chars, remove trailing comment).
• Use string instead of array of chars (utils.js:random_number_string).

• #21 Get JsonP transport working on IE9 (Vladimir Dronnikov).
• #26 Emit heartbeat event.
• #27 Include license inline.

• SockJS-client can only send UTF-8 encodable strings. Previously we took advantage of rich data structures and automatically json-encoded them, but this got removed. Now, all data passed to send will be converted to string. This is also how native
• status property on EventClose is renamed to code as per Websocket API WebSockets behave.
• The test server was updated to new sockjs-node API
• Fixed problem with Jsonp-polling transport on IE9
• Repository was moved - updated links.