# http-server: what changed from 13 to 14

- Product: http-server (https://whatsnew.fyi/product/http-server)
- Vendor: http-server
- Range: changelog entries numbered after v13.1.0 up to and including v14.1.1, stable releases only
- Entries below: 3 releases (newest first)
- Resolved: 13 is v13.1.0 and 14 is v14.1.1, the newest stable release of each major we track
- Carrying security changes: 1 · CVEs mentioned: 1 · Mentioning breaking changes: 1 · Removing or deprecating something: 1
- Page: https://whatsnew.fyi/product/http-server/compare/13...14

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## What changed (15 changes, grouped by kind)

### Added

#### v14.0.0 (2021-10-19)

- Add encoding charset sniffing
- Add passphrase option
- Add ability to pass proxyOptions
- Implement displaying last modified date in index
- Add version number to server startup output

### Changed

#### v14.1.1 (2022-05-31)

- Bump follow-redirects from 1.14.4 to 1.14.8

#### v14.1.0 (2022-01-10)

- Replace colors.js dependency with chalk

#### v14.0.0 (2021-10-19)

- Make --ssl an alias for --tls

### Fixed

#### v14.0.0 (2021-10-19)

- Don't crash when file path errors
- Fix CORS option detection
- Fix crash on redirect with formfeed in URL
- Fix --proxy without a protocol throwing an uncaught error
- Use relative paths in directory listing

### Removed

#### v14.0.0 (2021-10-19)

- Drop Node.js 10 support

### Security

#### v14.1.1 (2022-05-31)

- Patch CVE-2021-44906

## Release notes

### v14.1.1

- Date: 2022-05-31
- Version: v14.1.1
- Original notes: https://github.com/http-party/http-server/releases/tag/v14.1.1
- Permalink: https://whatsnew.fyi/product/http-server/releases/v14.1.1

- **security** — Patch CVE-2021-44906
- **changed** — Bump follow-redirects from 1.14.4 to 1.14.8

- Patch CVE-2021-44906 @dpassen (#803)

##### Other changes

- Bump follow-redirects from 1.14.4 to 1.14.8 @dependabot (#794)

### v14.1.0

- Date: 2022-01-10
- Version: v14.1.0
- Original notes: https://github.com/http-party/http-server/releases/tag/v14.1.0
- Permalink: https://whatsnew.fyi/product/http-server/releases/v14.1.0

- **changed** — Replace colors.js dependency with chalk

This release contains an emergency fix which replaces colors.js with chalk. See #781 for more info and discussion, and Marak/colors.js#285 for broader discussion about colors.js.

- Switch from colors to chalk @zbynek (#785)

### v14.0.0

- Date: 2021-10-19
- Version: v14.0.0
- Original notes: https://github.com/http-party/http-server/releases/tag/v14.0.0
- Permalink: https://whatsnew.fyi/product/http-server/releases/v14.0.0

- **added** — Add encoding charset sniffing
- **removed** — Drop Node.js 10 support
- **added** — Add passphrase option
- **changed** — Make --ssl an alias for --tls
- **added** — Add ability to pass proxyOptions
- **added** — Implement displaying last modified date in index
- **added** — Add version number to server startup output
- **fixed** — Don't crash when file path errors
- **fixed** — Fix CORS option detection
- **fixed** — Fix crash on redirect with formfeed in URL
- **fixed** — Fix --proxy without a protocol throwing an uncaught error
- **fixed** — Use relative paths in directory listing

##### Breaking changes

- Add encoding charset sniffing @boarwell (#736)
- Drop Node.js 10 support @boarwell (#739)
    - Required to support charset sniffing

##### Features and enhancements

- add passphrase option @chris--jones (#746)
- Make --ssl an alias for --tls @thornjad (#747)
- add ability to pass proxyOptions @yannickglt (#688)
- Replace mkdirp in tests with native JS @thornjad (#743)
- Implement displaying last modified date in index @owenl131 (#737)
- Adds version number to server startup output @Innoveramera (#734)

##### Bug Fixes

- Don't crash when file path errors @thornjad (#753)
- Fix CORS option detection @thornjad (#748)
- fix crash on redirect with formfeed in URL @thornjad (#749)
- Fixes --proxy without a protocol throwing an uncaught error @Ratcoder (#742)
- Fix tests EACCESS by finding an open port every time @thornjad (#741)
- Use relative paths in directory listing #661 @boarwell (#732)

##### Other changes

- Add Contributing guide @thornjad (#752)
- Eslint config - replace common-style with eslint-config-populist @chris--jones (#744)
- Update some dependencies @thornjad (#740)

**Full Changelog**: https://github.com/http-party/http-server/compare/v13.0.2...v14.0.0