v1.9.0
This is a SECURITY and feature release for the 1.x series of ReactPHP's HTTP component.
-
Security fix: This release fixes a medium severity security issue in ReactPHP's HTTP server component
that affects all versions betweenv0.8.0
andv1.8.0
. All users are encouraged to upgrade immediately.
(CVE-2023-26044 reported and fixed by @WyriHaximus) -
Feature: Support HTTP keep-alive for HTTP client (reusing persistent connections).
(#481, #484, #486 and #495 by @clue)This feature offers significant performance improvements when sending many
requests to the same host as it avoids recreating the underlying TCP/IP
connection and repeating the TLS handshake for secure HTTPS requests.$browser = new React\Http\Browser(); // Up to 300% faster! HTTP keep-alive is enabled by default $response = React\Async\await($browser->get('https://httpbingo.org/redirect/6')); assert($response instanceof Psr\Http\Message\ResponseInterface);
-
Feature: Add
Request
class to represent outgoing HTTP request message.
(#480 by @clue) -
Feature: Preserve request method and body for
307 Temporary Redirect
and308 Permanent Redirect
.
(#442 by @dinooo13) -
Feature: Include buffer logic to avoid dependency on reactphp/promise-stream.
(#482 by @clue) -
Improve test suite and project setup and report failed assertions.
(#478 by @clue, #487 and #491 by @WyriHaximus and #475 and #479 by @SimonFrings)