Change Log

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.0.2 (2021-04-07)

Bug Fixes

• backport regex change from 8.0.1 (b30dfdb), closes #19

6.0.1 (2018-08-27)

Bug Fixes

• opts: use figgy-pudding to specify consumed opts (cf86553)

6.0.0 (2018-04-09)

Bug Fixes

• docs: minor typo (b71ef17)

meta

• drop support for node@4 (d9bf359)

BREAKING CHANGES

• node@4 is no longer supported

5.3.0 (2018-03-13)

Features

• checkData: optionally throw when checkData fails (bf26b84)

5.2.4 (2018-02-16)

5.2.3 (2018-02-16)

Bug Fixes

• hashes: filter hash priority list by available hashes (2fa30b8)
• integrityStream: dedupe algorithms to generate (d56c654)

5.2.2 (2018-02-14)

Bug Fixes

• security: tweak strict SRI regex (#10) (d0ebcdc)

5.2.1 (2018-02-06)

5.2.0 (2018-02-06)

Features

• match: add integrity.match() (3c49cc4)

5.1.0 (2018-01-18)

Bug Fixes

• checkStream: integrityStream now takes opts.integrity algos into account (d262910)

Features

• sha3: do some guesswork about upcoming sha3 (7fdd9df)

5.0.0 (2017-10-23)

Features

• license: relicense to ISC (#9) (c82983a)

BREAKING CHANGES

• license: the license has been changed from CC0-1.0 to ISC.

4.1.6 (2017-06-07)

Bug Fixes

• checkStream: make sure to pass all opts through (0b1bcbe)

4.1.5 (2017-06-05)

Bug Fixes

• integrityStream: stop crashing if opts.algorithms and opts.integrity have an algo mismatch (fb1293e)

4.1.4 (2017-05-31)

Bug Fixes

• node: older versions of node@4 do not support base64buffer string parsing (513df4e)

4.1.3 (2017-05-24)

Bug Fixes

• check: handle various bad hash corner cases better (c2c262b)

4.1.2 (2017-04-18)

Bug Fixes

• stream: _flush can be called multiple times. use on("end") (b1c4805)

4.1.1 (2017-04-12)

Bug Fixes

• pickAlgorithm: error if pickAlgorithm() is used in an empty Integrity (fab470e)

4.1.0 (2017-04-07)

Features

• adding ssri.create for a crypto style interface (#2) (96f52ad)

4.0.0 (2017-04-03)

Bug Fixes

• integrity: should have changed the error code before. oops (8381afa)

BREAKING CHANGES

• integrity: EBADCHECKSUM -> EINTEGRITY for verification errors

3.0.2 (2017-04-03)

3.0.1 (2017-04-03)

Bug Fixes

• package.json: really should have these in the keywords because search (a6ac6d0)

3.0.0 (2017-04-03)

Bug Fixes

• hashes: IntegrityMetadata -> Hash (d04aa1f)

Features

• check: return IntegrityMetadata on check success (2301e74)
• fromHex: ssri.fromHex to make it easier to generate them from hex valus (049b89e)
• hex: utility function for getting hex version of digest (a9f021c)
• hexDigest: added hexDigest method to Integrity objects too (85208ba)
• integrity: add .isIntegrity and .isIntegrityMetadata (1b29e6f)
• integrityStream: new stream that can both generate and check streamed data (fd23e1b)
• parse: allow parsing straight into a single IntegrityMetadata object (c8ddf48)
• pickAlgorithm: Intergrity#pickAlgorithm() added (b97a796)
• size: calculate and update stream sizes (02ed1ad)

BREAKING CHANGES

• hashes: .isIntegrityMetadata is now .isHash. Also, any references to IntegrityMetadata now refer to Hash.
• integrityStream: createCheckerStream has been removed and replaced with a general-purpose integrityStream.

To convert existing createCheckerStream code, move the sri argument into opts.integrity in integrityStream. All other options should be the same.

• check: checkData, checkStream, and createCheckerStream now yield a whole IntegrityMetadata instance representing the first successful hash match.

2.0.0 (2017-03-24)

Bug Fixes

• strict-mode: make regexes more rigid (122a32c)

Features

• api: added serialize alias for unparse (999b421)
• concat: add Integrity#concat() (cae12c7)
• pickAlgo: pick the strongest algorithm provided, by default (58c18f7)
• strict-mode: strict SRI support (3f0b64c)
• stringify: replaced unparse/serialize with stringify (4acad30)
• verification: add opts.pickAlgorithm (f72e658)

BREAKING CHANGES

• pickAlgo: ssri will prioritize specific hashes now
• stringify: serialize and unparse have been removed. Use ssri.stringify instead.
• strict-mode: functions that accepted an optional sep argument now expect opts.sep.

1.0.0 (2017-03-23)

Features

• api: implemented initial api (4fbb16b)

BREAKING CHANGES

• api: Initial API established.