v4.11.2

aldas released this 11 Oct 05:34

· 51 commits to master since this release

Security

Bump golang.org/x/net to prevent CVE-2023-39325 / CVE-2023-44487 HTTP/2 Rapid Reset Attack #2527
fix(sec): randomString bias introduced by #2490 #2492
CSRF/RequestID mw: switch math/random usage to crypto/random #2490

Enhancements

Delete unused context in body_limit.go #2483
Use Go 1.21 in CI #2505
Fix some typos #2511
Allow CORS middleware to send Access-Control-Max-Age: 0 #2518
Bump dependancies #2522

Assets 2