CrowCpp v1.3.2 Release Notes
Release Date: 2026-03-29 // 3 months ago-
What's Changed
🚀 The main reason for this release is the the fix of a possible Header injection:
- 🔒 [Security] Prevent HTTP Response Header Injection by sanitizing CR/LF characters by @notfresh in #1167
🚀 These changes are also included in the release:
- Minor features to crow::json::wvalue by @CarloDG80 in #1143
- 📜 Fix heap-buffer-overflow in query_string when parsing malformed '%'Fix heap-buffer-overflow in query_string for malformed '%' by @shan-tanu-joshi-3010 in #1134
- 🔋 Feature#1129-CMake Error: ALIAS target "Boost::system" name collision… by @EmBachlitzanakis in #1133
- 🏗 Enable compiler sanitizers for test builds, fixed new bugs found with them by @shan-tanu-joshi-3010 in #1154
- 🛠 Fix build on OpenBSD by @Wisdurm in #1162
- Populate headers for HTTP OPTIONS requests by @DavidPetkovsek in #1062
🆕 New Contributors
- @CarloDG80 made their first contribution in #1143
- @shan-tanu-joshi-3010 made their first contribution in #1134
- @Wisdurm made their first contribution in #1162
- @notfresh made their first contribution in #1167
Full Changelog : v1.3.1...v1.3.2
Previous changes from v1.3.1
-
🛠 This release is mainly a bugfix release which takes last fixes from master branch.
What's Changed
🛠 Most important fixes are these, they fix issues with websockets:
- Protect websockets_ by mutex by @andrew-guz in #1136
- 🛠 fix for #1107 - websocket failure by @gittiver in #1113
🛠 In addition these fixes are applied too:
- 🔀 bugfix for errors on asio::write on do_sync_write() by @gittiver in #1116
- 📜 Use string_view in CookieParser::before_handle parsing by @Sightem in #1024
- replaced old trim function based on std::string by one using string_view by @gittiver in #1105
- 🏗 move CPM to CROW_BUILD_TESTS scope by @amhenze in #1121
- Replace uint16_t with size_t for rule/blueprint routing to eliminate narrowing warnings by @boulabiar in #1118
- Alternative to uint16 t cast by @gittiver in #1117
- ✂ removed double lookup by count() and find() by @gittiver in #1131
- 🛠 fix for issue #1127 Small oob read in
qs_scanvaluewhen the key is not found - increment qs only if '&' was found by @gittiver in #1132 - ➕ added http status codes from RFC 2518 (WebDAV) by @gittiver in #1144
🆕 New Contributors
- @amhenze made their first contribution in #1121
- @boulabiar made their first contribution in #1118
Full Changelog : v1.3.0...v1.3.1