withastro/astro
withastro/astro
Activity
Last release
Open issues
Open PRs
License
release notes
release notes
Published 3/6/2026
Contains new features#15759 39ff2a5 Thanks @matthewp! - Adds a new bodySizeLimit option to the @astrojs/node adapter
You can now configure a maximum allowed request body size for your Node.js standalone server. The default limit is 1 GB. Set the value in bytes, or pass 0 to disable the limit entirely:
import node from '@astrojs/node';
import { defineConfig } from 'astro/config';
export default defineConfig({
adapter: node({
mode: 'standalone',
bodySizeLimit: 1024 * 1024 * 100, // 100 MB
}),
});
#15777 02e24d9 Thanks @matthewp! - Fixes CSRF origin check mismatch by passing the actual server listening port to createRequest, ensuring the constructed URL origin includes the correct port (e.g., http://localhost:4321 instead of http://localhost). Also restricts X-Forwarded-Proto to only be trusted when allowedDomains is configured.
#15763 1567e8c Thanks @matthewp! - Normalizes static file paths before evaluating dotfile access rules for improved consistency
Updated dependencies [4ebc1e3, 4e7f3e8]:
release notes
Published 3/6/2026
Contains new features#15759 39ff2a5 Thanks @matthewp! - Adds a new bodySizeLimit option to the @astrojs/node adapter
You can now configure a maximum allowed request body size for your Node.js standalone server. The default limit is 1 GB. Set the value in bytes, or pass 0 to disable the limit entirely:
import node from '@astrojs/node';
import { defineConfig } from 'astro/config';
export default defineConfig({
adapter: node({
mode: 'standalone',
bodySizeLimit: 1024 * 1024 * 100, // 100 MB
}),
});
#15777 02e24d9 Thanks @matthewp! - Fixes CSRF origin check mismatch by passing the actual server listening port to createRequest, ensuring the constructed URL origin includes the correct port (e.g., http://localhost:4321 instead of http://localhost). Also restricts X-Forwarded-Proto to only be trusted when allowedDomains is configured.
#15763 1567e8c Thanks @matthewp! - Normalizes static file paths before evaluating dotfile access rules for improved consistency
Updated dependencies [4ebc1e3, 4e7f3e8]:
The web framework for content-driven websites. ⭐️ Star to support our work!