@tauri-apps/plugin-http 2.5.7 → 2.5.9

package/dist-js/index.cjs

@@ -165,14 +165,28 @@ async function fetch(input, init) {
         status,
         statusText
     });
-    // Set `Response` properties that are ignored by the
-    // constructor, like url and some headers
-    //
-    // Since url and headers are read only properties
-    // this is the only way to set them.
-    Object.defineProperty(res, 'url', { value: url });
+    // `Response.url` cannot be set via the constructor, so we define it manually
+    Object.defineProperty(res, 'url', { value: url, writable: false });
+    // Expose `set-cookie` via `response.headers` (and `getSetCookie()` where
+    // supported). This is not Fetch-spec compliant for network responses in
+    // browsers, where `set-cookie` is treated as a forbidden response
+    // header and is generally not readable from JavaScript.
     Object.defineProperty(res, 'headers', {
-        value: new Headers(responseHeaders)
+        value: new Headers(responseHeaders),
+        writable: false
+    });
+    // Patch clone() per-instance so cloning preserves the overridden properties
+    const originalClone = res.clone.bind(res);
+    Object.defineProperty(res, 'clone', {
+        value: () => {
+            const cloned = originalClone();
+            Object.defineProperty(cloned, 'url', { value: url, writable: false });
+            Object.defineProperty(cloned, 'headers', {
+                value: new Headers(responseHeaders),
+                writable: false
+            });
+            return cloned;
+        }
     });
     return res;
 }

package/dist-js/index.js

@@ -163,14 +163,28 @@ async function fetch(input, init) {
         status,
         statusText
     });
-    // Set `Response` properties that are ignored by the
-    // constructor, like url and some headers
-    //
-    // Since url and headers are read only properties
-    // this is the only way to set them.
-    Object.defineProperty(res, 'url', { value: url });
+    // `Response.url` cannot be set via the constructor, so we define it manually
+    Object.defineProperty(res, 'url', { value: url, writable: false });
+    // Expose `set-cookie` via `response.headers` (and `getSetCookie()` where
+    // supported). This is not Fetch-spec compliant for network responses in
+    // browsers, where `set-cookie` is treated as a forbidden response
+    // header and is generally not readable from JavaScript.
     Object.defineProperty(res, 'headers', {
-        value: new Headers(responseHeaders)
+        value: new Headers(responseHeaders),
+        writable: false
+    });
+    // Patch clone() per-instance so cloning preserves the overridden properties
+    const originalClone = res.clone.bind(res);
+    Object.defineProperty(res, 'clone', {
+        value: () => {
+            const cloned = originalClone();
+            Object.defineProperty(cloned, 'url', { value: url, writable: false });
+            Object.defineProperty(cloned, 'headers', {
+                value: new Headers(responseHeaders),
+                writable: false
+            });
+            return cloned;
+        }
     });
     return res;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tauri-apps/plugin-http",
-  "version": "2.5.7",
+  "version": "2.5.9",
   "license": "MIT OR Apache-2.0",
   "authors": [
     "Tauri Programme within The Commons Conservancy"
@@ -24,6 +24,6 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@tauri-apps/api": "^2.10.1"
+    "@tauri-apps/api": "^2.11.0"
   }
 }