Releases

1. 1.6.128 May 2022
   Release notes

   Fixes

   • Update eventsource to 2.0.2 due to CVE-2022-1650. Fixes #590
   • Update minimist to 1.2.6. Fixes #585

   Open source →
2. 1.6.027 Feb 2022
   Release notes

   Fixes

   • Remove agent: false to allow usage of globalAgent. Fixes #421

   dependencies

   • Update url-parse due to CVE-2022-0686, CVE-2022-0639, and CVE-2022-0512. Fixes #576
   • Remove json3 dependency. Fixes #476
   • Update eventsource to 1.1.0
   • Update faye-websocket to 0.11.4
   • Update debug to 3.2.7

   devDependencies

   • Update follow-redirects (devDep) due to CVE-2022-0536 and CVE-2022-0155
   • Update karma (devDep) due to CVE-2022-0437
   • Update cached-path-relative (devDep) due to CVE-2021-23518
   • Update fsevents (devDep) to fix:
     • ini CVE-2020-7788
     • minimist CVE-2020-7598
     • tar CVE-2021-37713, CVE-2021-37701, CVE-2021-32804, CVE-2021-32803
   • Update copy-props (devDep) due to CVE-2020-28503
   • Update eslint, mocha, gulp-replace, karma-browserify, gulp-sourcemaps, and browserify

   Other Changes

   • Remove bower
   • Remove Travis CI
   • Require Node.js 12

   Open source →
3. 1.5.224 Aug 2021
   Release notes

   • Update url-parse due to CVE-2021-3664.

   Open source →
4. 1.5.125 Mar 2021
   Release notes

   • Update url-parse due to CVE-2021-27515.

   Open source →
5. 1.5.02 Aug 2020
   Release notes

   • Update url-parse, kind-of, minimist, websocket-extensions due to security vulnerabilies.
   • Update dev dependencies.
   • Allow loopback address hostnames on a secure page. Fixes #486
   • Enable eventsource transport for node.js clients.

   Open source →
6. 1.4.022 Aug 2019
   Release notes

   • Add timeout option to set a minimum transport timeout. Fixes #403
   • Update dev deps to fix security warnings from npm audit
   • Guard against null this._transport in debug statement. Fixes #448

   Open source →
7. 1.3.024 Sept 2018
   Release notes

   • Revert debug to ^3 because v4 starts using ES6. Fixes #457

   Open source →
8. 1.2.021 Sept 2018
   Release notes

   • Update all outdated dependencies
   • Switch to karma and browserstack for running automated browser tests

   Open source →
9. 1.1.529 May 2018
   Release notes

   • Wrap the the contentWindow access in a try/catch block when in setTimeout #363
   • Revised example in README #356
   • Fix connection close when Transport timeout #358
   • Fixed crash with [email protected] on Android #386
   • Update jsDelivr link #404, #405
   • Remove Sauce Labs unsupported browsers
   • Add link to rust server implementation #411
   • location.protocol should include final : #396

   Open source →
10. 1.1.430 Apr 2017
    Release notes

    • Upgrade debug and fix object key literal mangling, fixes regression in Opera 11.10 #359
    • Trim descriptions in package.json and bower.json - #372

    Open source →
11. 1.1.223 Jan 2017

    Nothing published for this version

12. 1.1.120 May 2016

    Nothing published for this version

13. 1.1.030 Apr 2016

    Nothing published for this version

14. 1.0.331 Jul 2015

    Nothing published for this version

15. 1.0.222 Jul 2015

    Nothing published for this version

16. 1.0.120 Jul 2015

    Nothing published for this version

17. 1.0.014 May 2015
    Release notes

    • Simplify url handling by delegating to url-parse - #242
    • Upgrade to url-parse 1.0.1 to fix colon issue if auth has no password

    1.0.0-beta.13

    • Transport timeout on connection should fallback - #238

    1.0.0-beta.12

    • Upgrade url-parse to 1.0.0 to fix #218 again

    1.0.0-beta.10

    • Upgrade url-parse to 0.2.3 to fix #222

    1.0.0-beta.9

    • Upgrade url-parse to 0.2.1 to fix 'too much recursion' errors

    1.0.0-beta.8

    • Upgrade url-parse to 0.2.0 to fix inheritance issues

    1.0.0-beta.7

    • Upgrade url-parse to 0.1.5 to fix #218
    • Don't strip basic auth from url - #219

    1.0.0-beta.6

    • Upgrade url-parse to 0.1.3 to avoid CSP issues

    1.0.0-beta.5

    • Upgrade url-parse to 0.1.1 to fix #214

    1.0.0-beta.4

    • Upgrade url-parse to 0.1.0 and sockjs to 0.3.11
    • Update .npmignore

    1.0.0-beta.3

    • Move debug from devDependencies to dependencies

    1.0.0-beta.2

    • Relax requirements when using same origin XHR - #80
    • Upgrade to JSON3 from JSON2 - #123
    • Package library with browserify supporting the UMD pattern - #184
    • Move tests to JavaScript
    • Add Gulp.js build script
    • Fix getOrigin for file:/// urls and standard ports - #173
    • Add onerror event handlers to Websockets - #169
    • Increase RTO lower bound to prevent spurious timeouts on IE8/9 - #161
    • Use window.crypto for random values when available - #128
    • Fix handling of listeners added and removed mid-dispatch - #127
    • Fix XHR Streaming for IE8 - #83
    • Remove explicit AMD name - #107
    • Check for an empty response from /info request - #143
    • Add Content-Type to XHR requests to fix issue over HTTPS on Galaxy S4 - #164
    • Fix iframe fallback when message is sent from a popup in IE7/8 - #166
    • Add support for query strings on the url - #72
    • Now works inside of Web Workers - #181
    • Support EventSource / Server Sent Events outside of iframes - #201
    • Rename protocols to transports - #65
    • Allow transports which need the body to trigger on 'interactive' readyState - #175
    • try/catch access to document.domain - #187
    • Use window.location instead of document.location - #195
    • Allow usage from node.js with same API

    Open source →
18. 1.0.0-beta.135 May 2015pre-release

    Nothing published for this version

19. 1.0.0-beta.121 Feb 2015pre-release

    Nothing published for this version

20. 1.0.0-beta.111 Feb 2015pre-release

    Nothing published for this version

21. 1.0.0-beta.1017 Dec 2014pre-release

    Nothing published for this version

22. 1.0.0-beta.916 Dec 2014pre-release

    Nothing published for this version

23. 1.0.0-beta.816 Dec 2014pre-release

    Nothing published for this version

24. 1.0.0-beta.78 Dec 2014pre-release

    Nothing published for this version

25. 1.0.0-beta.622 Nov 2014pre-release

    Nothing published for this version

26. 1.0.0-beta.521 Nov 2014pre-release

    Nothing published for this version

27. 1.0.0-beta.419 Nov 2014pre-release

    Nothing published for this version

28. 0.1.31 May 2012

    Nothing published for this version

29. 0.1.22 Apr 2012
    Release notes

    • #29 - Allow all unicode characters to be send over SockJS.
    • #15 - SockJS should now work fine even if the connection is started in HEAD, before BODY is loaded.
    • #28 - In rare circumstances WebSocket connection can be left intact after the page is unloaded in FireFox.
    • Updated scripts to work with Node 0.6.
    • Initial work to do better QUnit testing.
    • Updated the minifying script (always escape unicode chars, remove trailing comment).
    • Use string instead of array of chars (utils.js:random_number_string).

    Open source →
30. 0.1.123 Mar 2012
    Release notes

    • #21 Get JsonP transport working on IE9 (Vladimir Dronnikov).
    • #26 Emit heartbeat event.
    • #27 Include license inline.

    Open source →
31. 0.1.023 Mar 2012
    Release notes

    • SockJS-client can only send UTF-8 encodable strings. Previously we took advantage of rich data structures and automatically json-encoded them, but this got removed. Now, all data passed to send will be converted to string. This is also how native
    • status property on EventClose is renamed to code as per Websocket API WebSockets behave.
    • The test server was updated to new sockjs-node API
    • Fixed problem with Jsonp-polling transport on IE9
    • Repository was moved - updated links.

    Open source →