v0.16.1

• detail::is_socket_alive() is not work for https connection #1481
• avoid memory leaks if linked with static openssl libs (#1857)
• Allow hex for ipv6 literal addr in redirect (#1859)
• Fix build on Windows with no WINAPI_PARTITION_APP support (#1865)
• test: fix GetRangeWithMaxLongLength on 32 bit machines (#1867)
• Fix build when targeting Windows 7 as platform. (#1869)
• Require a minimum of TLS 1.2 (#1889)

Bug fixes

v0.15.3...v0.16.0

Bug fix

• Breaking change in handling requests with Range in v0.15.1 and v0.15.2 #1772

Bug fix

• Severe directory traversal vulnerability (dotdotslash) #1768

Bug fix

• Malicious requests for many overlapping byte ranges of large files risk OOM #1766

Some new features and bug fixes

• Add missing #include for strcasecmp #1744
• ThreadPool: optional limit for jobs queue (#1741)
• Fix #1628 (OpenSSL 1.1.1 End of Life on September 11, 2023)
• Fix Windows std::max macro problem #1750
• Fix select() return code for fd >= 1024 (#1757)
• Add a getter for a bearer token from a request (#1755)
• Support move semantics for Response::set_content() (#1764)
• Treat paths with embedded NUL bytes as invalid (#1765)
• Fix usage of rand() is not seeded and depends on seeding by parent program #1747
• Fix check request range and fix response Content-Range. #1694

Bug fixes

• Fix: Query parameter including query delimiter ('?') not being parsed properly (#1713)
• Fix #1736
• Fix #1665
• Change some of status messages based on RFC 9110 (#1740)
• Add StatusCode enum (#1739)
• Fix #1738

Bug fixes

• Fix #1685
• Fix #1724

New feature

• Add optional user defined header writer #1683

Bug fix and breaking change

Bug fixes:

• Fix CPPHTTPLIB_ALLOW_LF_AS_LINE_TERMINATOR (#1634)
• Avoid a -Warray-bounds false positive in GCC 13. (#1639)

Breaking change:

• Fix #1638