- Fix
maxAge
option to reject invalid values
- Add
SameSite=None
support
- Fix
sameSite: true
to work with draft-7 clientstrue
now sendsSameSite=Strict
instead ofSameSite
- Add
sameSite
option- Replaces
firstPartyOnly
option, never implemented by browsers
- Replaces
- Improve error message when
encode
is not a function - Improve error message when
expires
is not aDate
- perf: enable strict mode
- perf: use for loop in parse
- perf: use string concatination for serialization
- Fix cookie
Max-Age
to never be a floating point number
- Fix regression when setting empty cookie value
- Ease the new restriction, which is just basic header-level validation
- Fix typo in invalid value errors
- Throw on invalid values provided to
serialize
- Ensures the resulting string is a valid HTTP header value
- Add
firstPartyOnly
option - Throw better error for invalid argument to parse
- perf: hoist regular expression
- Fix regression when setting empty cookie value
- Ease the new restriction, which is just basic header-level validation
- Fix typo in invalid value errors
- Throw better error for invalid argument to parse
- Throw on invalid values provided to
serialize
- Ensures the resulting string is a valid HTTP header value
- Reduce the scope of try-catch deopt
- Remove argument reassignments
- Remove unnecessary files from npm package
- Fix bad parse when cookie value contained a comma
- Fix support for
maxAge
of0
- Add
decode
option - Add
encode
option
- Ignore cookie parts missing
=
- Return raw cookie value if value unescape errors
- Use encode/decodeURIComponent for cookie encoding/decoding
- Improve server/client interoperability
- Only escape special characters per the cookie RFC
- Fix
maxAge
option to not throw error
- Add more tests
- Initial release