3.4.8

prevent incorrect automatic OPTIONS responses
The router has automatic handling of OPTIONS based on the registered routes, but if you make an OPTIONS request for an endpoint that does not exist, then it will still return a 200 with nothing allowed. Instead, we can let the request move on down the middleware chain. This has two benefits: first, if the route was not defined and no other middleware handles it, it will return with a 404. Secondly, if multiple routers are used and a later one has the route or a custom OPTIONS defined, the first router will not respond incorrectly.
2026-02-26 18:57:43 +00:00 · 2014-01-13 20:50:51 -08:00 · 2014-01-13 20:46:07 -08:00 · 2014-01-13 20:45:50 -08:00 · 2013-12-23 10:34:47 -08:00 · 2013-12-23 13:03:21 -05:00
57 changed files with 1491 additions and 514 deletions
--- a/.gitmodules
+++ b/.gitmodules
--- a/.travis.yml
+++ b/.travis.yml
@@ -1,4 +1,4 @@
 language: node_js
 node_js:
-  - 0.6
-  - 0.8
+  - "0.8"
+  - "0.10"
--- a/History.md
+++ b/History.md
@@ -1,3 +1,186 @@
+4.0.0 /
+==================
+
+ * remove:
+   - express(1) - moved to [express-generator](https://github.com/expressjs/generator)
+   - `req.accepted*` - use `req.accepts*()` instead
+   - `app.configure` - use logic in your own app code
+ * change:
+   - `req.accepts*` -> `req.accepts*s` - i.e. `req.acceptsEncoding` -> `req.acceptsEncodings`
+   - `req.params` is now an object instead of an array
+   - `json spaces` no longer enabled by default in development
+ * refactor:
+   - `req.accepts*` with [accepts](https://github.com/expressjs/accepts)
+   - `req.is` with [type-is](https://github.com/expressjs/type-is)
+
+3.4.8 / 2014-01-13
+==================
+
+ * prevent incorrect automatic OPTIONS responses #1868 @dpatti
+ * update binary and examples for jade 1.0 #1876 @yossi, #1877 @reqshark, #1892 @matheusazzi
+ * throw 400 in case of malformed paths @rlidwka
+
+3.4.7 / 2013-12-10
+==================
+
+ * update connect
+
+3.4.6 / 2013-12-01
+==================
+
+ * update connect (raw-body)
+
+3.4.5 / 2013-11-27
+==================
+
+ * update connect
+ * res.location: remove leading ./ #1802 @kapouer
+ * res.redirect: fix `res.redirect('toString') #1829 @michaelficarra
+ * res.send: always send ETag when content-length > 0
+ * router: add Router.all() method
+
+3.4.4 / 2013-10-29
+==================
+
+ * update connect
+ * update supertest
+ * update methods
+ * express(1): replace bodyParser() with urlencoded() and json() #1795 @chirag04
+
+3.4.3 / 2013-10-23
+==================
+
+ * update connect
+
+3.4.2 / 2013-10-18
+==================
+
+ * update connect
+ * downgrade commander
+
+3.4.1 / 2013-10-15
+==================
+
+ * update connect
+ * update commander
+ * jsonp: check if callback is a function
+ * router: wrap encodeURIComponent in a try/catch #1735 (@lxe)
+ * res.format: now includes chraset @1747 (@sorribas)
+ * res.links: allow multiple calls @1746 (@sorribas)
+
+3.4.0 / 2013-09-07
+==================
+
+ * add res.vary(). Closes #1682
+ * update connect
+
+3.3.8 / 2013-09-02
+==================
+
+ * update connect
+
+3.3.7 / 2013-08-28
+==================
+
+ * update connect
+
+3.3.6 / 2013-08-27
+==================
+
+ * Revert "remove charset from json responses. Closes #1631" (causes issues in some clients)
+ * add: req.accepts take an argument list
+
+3.3.4 / 2013-07-08
+==================
+
+ * update send and connect
+
+3.3.3 / 2013-07-04
+==================
+
+ * update connect
+
+3.3.2 / 2013-07-03
+==================
+
+ * update connect
+ * update send
+ * remove .version export
+
+3.3.1 / 2013-06-27
+==================
+
+ * update connect
+
+3.3.0 / 2013-06-26
+==================
+
+ * update connect
+ * add support for multiple X-Forwarded-Proto values. Closes #1646
+ * change: remove charset from json responses. Closes #1631
+ * change: return actual booleans from req.accept* functions
+ * fix jsonp callback array throw
+
+3.2.6 / 2013-06-02
+==================
+
+ * update connect
+
+3.2.5 / 2013-05-21
+==================
+
+ * update connect
+ * update node-cookie
+ * add: throw a meaningful error when there is no default engine
+ * change generation of ETags with res.send() to GET requests only. Closes #1619
+
+3.2.4 / 2013-05-09
+==================
+
+  * fix `req.subdomains` when no Host is present
+  * fix `req.host` when no Host is present, return undefined
+
+3.2.3 / 2013-05-07
+==================
+
+  * update connect / qs
+
+3.2.2 / 2013-05-03
+==================
+
+  * update qs
+
+3.2.1 / 2013-04-29
+==================
+
+  * add app.VERB() paths array deprecation warning
+  * update connect
+  * update qs and remove all ~ semver crap
+  * fix: accept number as value of Signed Cookie
+
+3.2.0 / 2013-04-15
+==================
+
+  * add "view" constructor setting to override view behaviour
+  * add req.acceptsEncoding(name)
+  * add req.acceptedEncodings
+  * revert cookie signature change causing session race conditions
+  * fix sorting of Accept values of the same quality
+
+3.1.2 / 2013-04-12
+==================
+
+  * add support for custom Accept parameters
+  * update cookie-signature
+
+3.1.1 / 2013-04-01
+==================
+
+  * add X-Forwarded-Host support to `req.host`
+  * fix relative redirects
+  * update mkdirp
+  * update buffer-crc32
+  * remove legacy app.configure() method from app template.

 3.1.0 / 2013-01-25
 ==================
--- a/2
+++ b/2
@@ -1,6 +1,6 @@
 (The MIT License)

-Copyright (c) 2009-2011 TJ Holowaychuk <tj@vision-media.ca>
+Copyright (c) 2009-2013 TJ Holowaychuk <tj@vision-media.ca>

 Permission is hereby granted, free of charge, to any person obtaining
 a copy of this software and associated documentation files (the
--- a/9
+++ b/9
@@ -1,5 +1,5 @@

-MOCHA_OPTS=
+MOCHA_OPTS= --check-leaks
 REPORTER = dot

 check: test
@@ -9,6 +9,7 @@ test: test-unit test-acceptance
 test-unit:
 	@NODE_ENV=test ./node_modules/.bin/mocha \
 		--reporter $(REPORTER) \
+		--globals setImmediate,clearImmediate \
 		$(MOCHA_OPTS)

 test-acceptance:
@@ -23,11 +24,11 @@ test-cov: lib-cov
 lib-cov:
 	@jscoverage lib lib-cov

-benchmark:
-	@./support/bench
+bench:
+	@$(MAKE) -C benchmarks

 clean:
 	rm -f coverage.html
 	rm -fr lib-cov

-.PHONY: test test-unit test-acceptance benchmark clean
+.PHONY: test test-unit test-acceptance bench clean
--- a/Readme.md
+++ b/Readme.md
@@ -1,6 +1,8 @@
-![express logo](http://f.cl.ly/items/0V2S1n0K1i3y1c122g04/Screen%20Shot%202012-04-11%20at%209.59.42%20AM.png)
+[![express logo](http://f.cl.ly/items/0V2S1n0K1i3y1c122g04/Screen%20Shot%202012-04-11%20at%209.59.42%20AM.png)](http://expressjs.com/)

-  Fast, unopinionated, minimalist web framework for [node](http://nodejs.org). [![Build Status](https://secure.travis-ci.org/visionmedia/express.png)](http://travis-ci.org/visionmedia/express)
+  Fast, unopinionated, minimalist web framework for [node](http://nodejs.org).
+
+  [![Build Status](https://secure.travis-ci.org/visionmedia/express.png)](http://travis-ci.org/visionmedia/express) [![Gittip](http://img.shields.io/gittip/visionmedia.png)](https://www.gittip.com/visionmedia/)

 ```js
 var express = require('express');
@@ -48,112 +50,57 @@ app.listen(3000);

 ## Philosophy

-  The Express philosophy is to provide small, robust tooling for HTTP servers. Making
+  The Express philosophy is to provide small, robust tooling for HTTP servers, making
  it a great solution for single page applications, web sites, hybrids, or public
  HTTP APIs.
-  
-  Built on Connect you can use _only_ what you need, and nothing more, applications
+
+  Built on Connect, you can use _only_ what you need, and nothing more. Applications
  can be as big or as small as you like, even a single file. Express does
  not force you to use any specific ORM or template engine. With support for over
-  14 template engines via [Consolidate.js](http://github.com/visionmedia/consolidate.js)
+  14 template engines via [Consolidate.js](http://github.com/visionmedia/consolidate.js),
  you can quickly craft your perfect framework.

 ## More Information

+  * [Website and Documentation](http://expressjs.com/) stored at [visionmedia/expressjs.com](https://github.com/visionmedia/expressjs.com)
  * Join #express on freenode
  * [Google Group](http://groups.google.com/group/express-js) for discussion
  * Follow [tjholowaychuk](http://twitter.com/tjholowaychuk) on twitter for updates
  * Visit the [Wiki](http://github.com/visionmedia/express/wiki)
-  * [日本語ドキュメンテーション](http://hideyukisaito.com/doc/expressjs/) by [hideyukisaito](https://github.com/hideyukisaito)
-  * [Русскоязычная документация](http://express-js.ru/)
+  * [Русскоязычная документация](http://jsman.ru/express/)
+  * Run express examples [online](https://runnable.com/express)

 ## Viewing Examples

-Clone the Express repo, then install the dev dependencies to install all the example / test suite deps:
+Clone the Express repo, then install the dev dependencies to install all the example / test suite dependencies:

    $ git clone git://github.com/visionmedia/express.git --depth 1
    $ cd express
    $ npm install

-then run whichever tests you want:
+Then run whichever tests you want:

    $ node examples/content-negotiation

+You can also view live examples here:
+
+<a href="https://runnable.com/express" target="_blank"><img src="https://runnable.com/external/styles/assets/runnablebtn.png" style="width:67px;height:25px;"></a>
+
 ## Running Tests

-To run the test suite first invoke the following command within the repo, installing the development dependencies:
+To run the test suite, first invoke the following command within the repo, installing the development dependencies:

    $ npm install

-then run the tests:
+Then run the tests:

    $ make test

 ## Contributors

-```
-project: express
-commits: 3559
-active : 468 days
-files  : 237
-authors: 
- 1891	Tj Holowaychuk          53.1%
- 1285	visionmedia             36.1%
-  182	TJ Holowaychuk          5.1%
-   54	Aaron Heckmann          1.5%
-   34	csausdev                1.0%
-   26	ciaranj                 0.7%
-   21	Robert Sköld            0.6%
-    6	Guillermo Rauch         0.2%
-    3	Dav Glass               0.1%
-    3	Nick Poulden            0.1%
-    2	Randy Merrill           0.1%
-    2	Benny Wong              0.1%
-    2	Hunter Loftis           0.1%
-    2	Jake Gordon             0.1%
-    2	Brian McKinney          0.1%
-    2	Roman Shtylman          0.1%
-    2	Ben Weaver              0.1%
-    2	Dave Hoover             0.1%
-    2	Eivind Fjeldstad        0.1%
-    2	Daniel Shaw             0.1%
-    1	Matt Colyer             0.0%
-    1	Pau Ramon               0.0%
-    1	Pero Pejovic            0.0%
-    1	Peter Rekdal Sunde      0.0%
-    1	Raynos                  0.0%
-    1	Teng Siong Ong          0.0%
-    1	Viktor Kelemen          0.0%
-    1	ctide                   0.0%
-    1	8bitDesigner            0.0%
-    1	isaacs                  0.0%
-    1	mgutz                   0.0%
-    1	pikeas                  0.0%
-    1	shuwatto                0.0%
-    1	tstrimple               0.0%
-    1	ewoudj                  0.0%
-    1	Adam Sanderson          0.0%
-    1	Andrii Kostenko         0.0%
-    1	Andy Hiew               0.0%
-    1	Arpad Borsos            0.0%
-    1	Ashwin Purohit          0.0%
-    1	Benjen                  0.0%
-    1	Darren Torpey           0.0%
-    1	Greg Ritter             0.0%
-    1	Gregory Ritter          0.0%
-    1	James Herdman           0.0%
-    1	Jim Snodgrass           0.0%
-    1	Joe McCann              0.0%
-    1	Jonathan Dumaine        0.0%
-    1	Jonathan Palardy        0.0%
-    1	Jonathan Zacsh          0.0%
-    1	Justin Lilly            0.0%
-    1	Ken Sato                0.0%
-    1	Maciej Małecki          0.0%
-    1	Masahiro Hayashi        0.0%
-```
+  https://github.com/visionmedia/express/graphs/contributors

-## License 
+## License

 (The MIT License)

--- a/benchmarks/Makefile
+++ b/benchmarks/Makefile
@@ -0,0 +1,13 @@
+
+all:
+	@./run 1 middleware
+	@./run 5 middleware
+	@./run 10 middleware
+	@./run 15 middleware
+	@./run 20 middleware
+	@./run 30 middleware
+	@./run 50 middleware
+	@./run 100 middleware
+	@echo
+
+.PHONY: all
--- a/benchmarks/middleware.js
+++ b/benchmarks/middleware.js
@@ -0,0 +1,23 @@
+
+var http = require('http');
+var express = require('..');
+var app = express();
+
+// number of middleware
+
+var n = parseInt(process.env.MW || '1', 10);
+console.log('  %s middleware', n);
+
+while (n--) {
+  app.use(function(req, res, next){
+    next();
+  });
+}
+
+var body = new Buffer('Hello World');
+
+app.use(function(req, res, next){
+  res.send(body);
+});
+
+app.listen(3333);
--- a/benchmarks/run
+++ b/benchmarks/run
@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+echo
+MW=$1 node $2 &
+pid=$!
+
+sleep 2
+
+wrk 'http://localhost:3333/?foo[bar]=baz' \
+  -d 3 \
+  -c 50 \
+  -t 8 \
+  | grep 'Requests/sec' \
+  | awk '{ print "  " $2 }'
+
+kill $pid
--- a/bin/express
+++ b/bin/express
@@ -4,8 +4,7 @@
 * Module dependencies.
 */

-var exec = require('child_process').exec
-  , program = require('commander')
+var program = require('commander')
  , mkdirp = require('mkdirp')
  , pkg = require('../package.json')
  , version = pkg.version
@@ -16,6 +15,7 @@ var exec = require('child_process').exec

 program
  .version(version)
+  .usage('[options] [dir]')
  .option('-s, --sessions', 'add session support')
  .option('-e, --ejs', 'add ejs engine support (defaults to jade)')
  .option('-J, --jshtml', 'add jshtml engine support (defaults to jade)')
@@ -30,7 +30,7 @@ var path = program.args.shift() || '.';

 // end-of-line code

-var eol = 'win32' == os.platform() ? '\r\n' : '\n'
+var eol = os.EOL

 // Template engine

@@ -74,7 +74,7 @@ var users = [
 */

 var jadeLayout = [
-    'doctype 5'
+    'doctype html'
  , 'html'
  , '  head'
  , '    title= title'
@@ -208,35 +208,36 @@ var app = [
  , ' * Module dependencies.'
  , ' */'
  , ''
-  , 'var express = require(\'express\')'
-  , '  , routes = require(\'./routes\')'
-  , '  , user = require(\'./routes/user\')'
-  , '  , http = require(\'http\')'
-  , '  , path = require(\'path\');'
+  , 'var express = require(\'express\');'
+  , 'var routes = require(\'./routes\');'
+  , 'var user = require(\'./routes/user\');'
+  , 'var http = require(\'http\');'
+  , 'var path = require(\'path\');'
  , ''
  , 'var app = express();'
  , ''
-  , 'app.configure(function(){'
-  , '  app.set(\'port\', process.env.PORT || 3000);'
-  , '  app.set(\'views\', __dirname + \'/views\');'
-  , '  app.set(\'view engine\', \':TEMPLATE\');'
-  , '  app.use(express.favicon());'
-  , '  app.use(express.logger(\'dev\'));'
-  , '  app.use(express.bodyParser());'
-  , '  app.use(express.methodOverride());{sess}'
-  , '  app.use(app.router);{css}'
-  , '  app.use(express.static(path.join(__dirname, \'public\')));'
-  , '});'
+  , '// all environments'
+  , 'app.set(\'port\', process.env.PORT || 3000);'
+  , 'app.set(\'views\', path.join(__dirname, \'views\'));'
+  , 'app.set(\'view engine\', \':TEMPLATE\');'
+  , 'app.use(express.favicon());'
+  , 'app.use(express.logger(\'dev\'));'
+  , 'app.use(express.json());'
+  , 'app.use(express.urlencoded());'
+  , 'app.use(express.methodOverride());{sess}'
+  , 'app.use(app.router);{css}'
+  , 'app.use(express.static(path.join(__dirname, \'public\')));'
  , ''
-  , 'app.configure(\'development\', function(){'
+  , '// development only'
+  , 'if (\'development\' == app.get(\'env\')) {'
  , '  app.use(express.errorHandler());'
-  , '});'
+  , '}'
  , ''
  , 'app.get(\'/\', routes.index);'
  , 'app.get(\'/users\', user.list);'
  , ''
  , 'http.createServer(app).listen(app.get(\'port\'), function(){'
-  , '  console.log("Express server listening on port " + app.get(\'port\'));'
+  , '  console.log(\'Express server listening on port \' + app.get(\'port\'));'
  , '});'
  , ''
 ].join(eol);
@@ -323,10 +324,10 @@ function createApplicationAt(path) {
    // CSS Engine support
    switch (program.css) {
      case 'less':
-        app = app.replace('{css}', eol + '  app.use(require(\'less-middleware\')({ src: __dirname + \'/public\' }));');
+        app = app.replace('{css}', eol + 'app.use(require(\'less-middleware\')({ src: path.join(__dirname, \'public\') }));');
        break;
      case 'stylus':
-        app = app.replace('{css}', eol + '  app.use(require(\'stylus\').middleware(__dirname + \'/public\'));');
+        app = app.replace('{css}', eol + 'app.use(require(\'stylus\').middleware(path.join(__dirname, \'public\')));');
        break;
      default:
        app = app.replace('{css}', '');
@@ -334,7 +335,7 @@ function createApplicationAt(path) {

    // Session support
    app = app.replace('{sess}', program.sessions
-      ? eol + '  app.use(express.cookieParser(\'your secret here\'));' + eol + '  app.use(express.session());'
+      ? eol + 'app.use(express.cookieParser(\'your secret here\'));' + eol + 'app.use(express.session());'
      : '');

    // Template support
@@ -345,7 +346,7 @@ function createApplicationAt(path) {
        name: 'application-name'
      , version: '0.0.1'
      , private: true
-      , scripts: { start: 'node app' }
+      , scripts: { start: 'node app.js' }
      , dependencies: {
        express: version
      }
--- a/client.js
+++ b/client.js
@@ -1,25 +0,0 @@
-
-var http = require('http');
-
-var times = 50;
-
-while (times--) {
-  var req = http.request({
-      port: 3000
-    , method: 'POST'
-    , headers: { 'Content-Type': 'application/x-www-form-urlencoded' }
-  });
-
-  req.on('response', function(res){
-    console.log(res.statusCode);
-  });
-
-  var n = 500000;
-  while (n--) {
-    req.write('foo=bar&bar=baz&');
-  }
-
-  req.write('foo=bar&bar=baz');
-
-  req.end();
-}
--- a/examples/auth/pass.js
+++ b/examples/auth/pass.js
@@ -31,7 +31,9 @@ var iterations = 12000;

 exports.hash = function (pwd, salt, fn) {
  if (3 == arguments.length) {
-    crypto.pbkdf2(pwd, salt, iterations, len, fn);
+    crypto.pbkdf2(pwd, salt, iterations, len, function(err, hash){
+      fn(err, hash.toString('base64'));
+    });
  } else {
    fn = salt;
    crypto.randomBytes(len, function(err, salt){
@@ -39,7 +41,7 @@ exports.hash = function (pwd, salt, fn) {
      salt = salt.toString('base64');
      crypto.pbkdf2(pwd, salt, iterations, len, function(err, hash){
        if (err) return fn(err);
-        fn(null, salt, hash);
+        fn(null, salt, hash.toString('base64'));
      });
    });
  }
--- a/examples/big-view/pets.jade
+++ b/examples/big-view/pets.jade
@@ -1,4 +1,4 @@
-style
+style.
  body {
    padding: 50px;
    font: 16px "Helvetica Neue", Helvetica;
--- a/examples/content-negotiation/index.js
+++ b/examples/content-negotiation/index.js
@@ -1,8 +1,9 @@
-
 var express = require('../../')
  , app = module.exports = express()
  , users = require('./db');

+// so either you can deal with different types of formatting 
+// for expected response in index.js
 app.get('/', function(req, res){
  res.format({
    html: function(){
@@ -24,10 +25,11 @@ app.get('/', function(req, res){
 });

 // or you could write a tiny middleware like
-// this to abstract make things a bit more declarative:
+// this to add a layer of abstraction
+// and make things a bit more declarative:

-function format(mod) {
-  var obj = require(mod);
+function format(path) {
+  var obj = require(path);
  return function(req, res){
    res.format(obj);
  }
@@ -38,4 +40,4 @@ app.get('/users', format('./users'));
 if (!module.parent) {
  app.listen(3000);
  console.log('listening on port 3000');
-}
+}
--- a/examples/expose-data-to-client/views/page.jade
+++ b/examples/expose-data-to-client/views/page.jade
@@ -1,7 +1,7 @@
 html
  head
    title Express
-    script
+    script.
      // call this whatever you like,
      // or dump them into individual
      // props like "var user ="
@@ -10,5 +10,5 @@ html
    h1 Expose client data
    p The following was exposed to the client:
    pre
-      script
+      script.
        document.write(JSON.stringify(data, null, 2))
--- a/examples/jade/views/layout.jade
+++ b/examples/jade/views/layout.jade
@@ -1,5 +1,5 @@
-!!! 5
+doctype html
 html
  include header
  body
-    block content
+    block content
--- a/examples/markdown/index.js
+++ b/examples/markdown/index.js
@@ -3,9 +3,9 @@
 * Module dependencies.
 */

-var express = require('../../')
+var express = require('../..')
  , fs = require('fs')
-  , md = require('github-flavored-markdown').parse;
+  , md = require('marked').parse;

 var app = module.exports = express();

@@ -42,4 +42,4 @@ app.get('/fail', function(req, res){
 if (!module.parent) {
  app.listen(3000);
  console.log('Express started on port 3000');
-}
+}
--- a/examples/mvc/index.js
+++ b/examples/mvc/index.js
@@ -1,4 +1,3 @@
-
 var express = require('../..');

 var app = module.exports = express();
@@ -58,10 +57,10 @@ app.use(function(req, res, next){
   });
  */

+  next();
  // empty or "flush" the messages so they
  // don't build up
  req.session.messages = [];
-  next();
 });

 // load controllers
@@ -90,4 +89,4 @@ app.use(function(req, res, next){
 if (!module.parent) {
  app.listen(3000);
  console.log('\n  listening on port 3000\n');
-}
+}
--- a/examples/search/search.jade
+++ b/examples/search/search.jade
@@ -2,7 +2,7 @@
 html
  head
    title Search example
-    style
+    style.
      body {
        font: 14px "Helvetica Neue", Helvetica;
        padding: 50px;
--- a/examples/vhost/index.js
+++ b/examples/vhost/index.js
@@ -1,4 +1,3 @@
-
 /**
 * Module dependencies.
 */
@@ -6,14 +5,14 @@
 var express = require('../..');

 /*
-edit /etc/vhosts:
+edit /etc/hosts:

 127.0.0.1       foo.example.com
 127.0.0.1       bar.example.com
 127.0.0.1       example.com
 */

-// Main app
+// Main server app

 var main = express();

@@ -24,7 +23,7 @@ main.get('/', function(req, res){
 });

 main.get('/:sub', function(req, res){
-  res.send('requsted ' + req.params.sub);
+  res.send('requested ' + req.params.sub);
 });

 // Redirect app
@@ -36,12 +35,12 @@ redirect.all('*', function(req, res){
  res.redirect('http://example.com:3000/' + req.subdomains[0]);
 });

-// Main app
+// Vhost app

 var app = express();

-app.use(express.vhost('*.example.com', redirect))
-app.use(express.vhost('example.com', main));
+app.use(express.vhost('*.example.com', redirect)) // Serves all subdomains via Redirect app
+app.use(express.vhost('example.com', main)); // Serves top level domain via Main server app 

 app.listen(3000);
 console.log('Express app started on port 3000');
--- a/examples/view-constructor/github-view.js
+++ b/examples/view-constructor/github-view.js
@@ -0,0 +1,52 @@
+
+/**
+ * Module dependencies.
+ */
+
+var http = require('http')
+  , path = require('path')
+  , extname = path.extname
+
+/**
+ * Expose `GithubView`.
+ */
+
+module.exports = GithubView;
+
+/**
+ * Custom view that fetches and renders
+ * remove github templates. You could
+ * render templates from a database etc.
+ */
+
+function GithubView(name, options){
+  this.name = name;
+  options = options || {};
+  this.engine = options.engines[extname(name)];
+  // "root" is the app.set('views') setting, however
+  // in your own implementation you could ignore this
+  this.path = '/' + options.root + '/master/' + name;
+}
+
+/**
+ * Render the view.
+ */
+
+GithubView.prototype.render = function(options, fn){
+  var self = this;
+  var opts = {
+    host: 'rawgithub.com',
+    port: 80,
+    path: this.path,
+    method: 'GET'
+  };
+
+  http.request(opts, function(res) {
+    var buf = '';
+    res.setEncoding('utf8');
+    res.on('data', function(str){ buf += str });
+    res.on('end', function(){
+      self.engine(buf, options, fn);
+    });
+  }).end();
+};
--- a/examples/view-constructor/index.js
+++ b/examples/view-constructor/index.js
@@ -0,0 +1,47 @@
+
+/**
+ * Module dependencies.
+ */
+
+var express = require('../../')
+  , http = require('http')
+  , GithubView = require('./github-view')
+  , md = require('marked').parse;
+
+var app = module.exports = express();
+
+// register .md as an engine in express view system
+app.engine('md', function(str, options, fn){
+  try {
+    var html = md(str);
+    html = html.replace(/\{([^}]+)\}/g, function(_, name){
+      return options[name] || '';
+    })
+    fn(null, html);
+  } catch(err) {
+    fn(err);
+  }
+})
+
+// pointing to a particular github repo to load files from it
+app.set('views', 'visionmedia/express');
+
+// register a new view constructor
+app.set('view', GithubView);
+
+app.get('/', function(req, res){
+  // rendering a view relative to the repo.
+  // app.locals, res.locals, and locals passed
+  // work like they normally would
+  res.render('examples/markdown/views/index.md', { title: 'Example' });
+})
+
+app.get('/Readme.md', function(req, res){
+  // rendering a view from https://github.com/visionmedia/express/blob/master/Readme.md
+  res.render('Readme.md');
+})
+
+if (!module.parent) {
+  app.listen(3000);
+  console.log('Express started on port 3000');
+}
--- a/examples/view-locals/layout.jade
+++ b/examples/view-locals/layout.jade
@@ -1,8 +1,8 @@
-doctype 5
+doctype html
 html
  head
    title= title
-    style
+    style.
      body {
        padding: 50px;
        font: 16px Helvetica, Arial;
--- a/lib/application.js
+++ b/lib/application.js
@@ -10,9 +10,7 @@ var connect = require('connect')
  , locals = require('./utils').locals
  , View = require('./view')
  , utils = connect.utils
-  , path = require('path')
-  , http = require('http')
-  , join = path.join;
+  , http = require('http');

 /**
 * Application prototype.
@@ -34,7 +32,6 @@ app.init = function(){
  this.cache = {};
  this.settings = {};
  this.engines = {};
-  this.viewCallbacks = [];
  this.defaultConfiguration();
 };

@@ -47,6 +44,7 @@ app.init = function(){
 app.defaultConfiguration = function(){
  // default settings
  this.enable('x-powered-by');
+  this.enable('etag');
  this.set('env', process.env.NODE_ENV || 'development');
  this.set('subdomain offset', 2);
  debug('booting in %s mode', this.get('env'));
@@ -60,6 +58,7 @@ app.defaultConfiguration = function(){
    this.request.__proto__ = parent.request;
    this.response.__proto__ = parent.response;
    this.engines.__proto__ = parent.engines;
+    this.settings.__proto__ = parent.settings;
  });

  // router
@@ -79,6 +78,7 @@ app.defaultConfiguration = function(){
  this.locals.settings = this.settings;

  // default configuration
+  this.set('view', View);
  this.set('views', process.cwd() + '/views');
  this.set('jsonp callback name', 'callback');

@@ -116,7 +116,6 @@ app.use = function(route, fn){
    fn = function(req, res, next) {
      var orig = req.app;
      app.handle(req, res, function(err){
-        req.app = res.app = orig;
        req.__proto__ = orig.request;
        res.__proto__ = orig.response;
        next(err);
@@ -161,7 +160,7 @@ app.use = function(route, fn){
 * [Consolidate.js](https://github.com/visionmedia/consolidate.js)
 * library was created to map all of node's popular template
 * engines to follow this convention, thus allowing them to
- * work seeessly within Express.
+ * work seamlessly within Express.
 *
 * @param {String} ext
 * @param {Function} fn
@@ -184,7 +183,7 @@ app.engine = function(ext, fn){
 * could automatically load a user's information from the database without
 * any additional code,
 *
- * The callback uses the samesignature as middleware, the only differencing
+ * The callback uses the same signature as middleware, the only difference
 * being that the value of the placeholder is passed, in this case the _id_
 * of the user. Once the `next()` function is invoked, just like middleware
 * it will continue on to execute the route, or subsequent parameter functions.
@@ -250,11 +249,7 @@ app.param = function(name, fn){

 app.set = function(setting, val){
  if (1 == arguments.length) {
-    if (this.settings.hasOwnProperty(setting)) {
-      return this.settings[setting];
-    } else if (this.parent) {
-      return this.parent.set(setting);
-    }
+    return this.settings[setting];
  } else {
    this.settings[setting] = val;
    return this;
@@ -405,7 +400,12 @@ methods.forEach(function(method){
  app[method] = function(path){
    if ('get' == method && 1 == arguments.length) return this.set(path);

-    // if no router attacked yet, attach the router
+    // deprecated
+    if (Array.isArray(path)) {
+      console.trace('passing an array to app.VERB() is deprecated and will be removed in 4.0');
+    }
+
+    // if no router attached yet, attach the router
    if (!this._usedRouter) this.use(this.router);

    // setup route
@@ -483,14 +483,14 @@ app.render = function(name, options, fn){

  // view
  if (!view) {
-    view = new View(name, {
+    view = new (this.get('view'))(name, {
      defaultEngine: this.get('view engine'),
      root: this.get('views'),
      engines: engines
    });

    if (!view.path) {
-      var err = new Error('Failed to lookup view "' + name + '"');
+      var err = new Error('Failed to lookup view "' + name + '" in views directory "' + view.root + '"');
      err.view = view;
      return fn(err);
    }
--- a/lib/express.js
+++ b/lib/express.js
@@ -2,6 +2,7 @@
 * Module dependencies.
 */

+var merge = require('merge-descriptors');
 var connect = require('connect')
  , proto = require('./application')
  , Route = require('./router/route')
@@ -16,12 +17,6 @@ var connect = require('connect')

 exports = module.exports = createApplication;

-/**
- * Framework version.
- */
-
-exports.version = '3.1.0';
-
 /**
 * Expose mime.
 */
@@ -38,8 +33,8 @@ exports.mime = connect.mime;
 function createApplication() {
  var app = connect();
  utils.merge(app, proto);
-  app.request = { __proto__: req };
-  app.response = { __proto__: res };
+  app.request = { __proto__: req, app: app };
+  app.response = { __proto__: res, app: app };
  app.init();
  return app;
 }
@@ -49,12 +44,7 @@ function createApplication() {
 * for example `express.logger` etc.
 */

-for (var key in connect.middleware) {
-  Object.defineProperty(
-      exports
-    , key
-    , Object.getOwnPropertyDescriptor(connect.middleware, key));
-}
+merge(exports, connect.middleware);

 /**
 * Error on createServer().
--- a/lib/middleware.js
+++ b/lib/middleware.js
@@ -17,7 +17,6 @@ var utils = require('./utils');

 exports.init = function(app){
  return function expressInit(req, res, next){
-    req.app = res.app = app;
    if (app.enabled('x-powered-by')) res.setHeader('X-Powered-By', 'Express');
    req.res = res;
    res.req = req;
--- a/lib/request.js
+++ b/lib/request.js
@@ -63,6 +63,7 @@ req.header = function(name){
 * The `type` value may be a single mime type string
 * such as "application/json", the extension name
 * such as "json", a comma-delimted list such as "json, html, text/plain",
+ * an argument list such as `"json", "html", "text/plain"`,
 * or an array `["json", "html", "text/plain"]`. When a list
 * or array is given the _best_ match, if any is returned.
 *
@@ -89,6 +90,7 @@ req.header = function(name){
 *
 *     // Accept: text/*;q=.5, application/json
 *     req.accepts(['html', 'json']);
+ *     req.accepts('html', 'json');
 *     req.accepts('html, json');
 *     // => "json"
 *
@@ -98,7 +100,20 @@ req.header = function(name){
 */

 req.accepts = function(type){
-  return utils.accepts(type, this.get('Accept'));
+  var args = arguments.length > 1 ? [].slice.apply(arguments) : type;
+  return utils.accepts(args, this.get('Accept'));
+};
+
+/**
+ * Check if the given `encoding` is accepted.
+ *
+ * @param {String} encoding
+ * @return {Boolean}
+ * @api public
+ */
+
+req.acceptsEncoding = function(encoding){
+  return !! ~this.acceptedEncodings.indexOf(encoding);
 };

 /**
@@ -113,7 +128,7 @@ req.accepts = function(type){
 req.acceptsCharset = function(charset){
  var accepted = this.acceptedCharsets;
  return accepted.length
-    ? ~accepted.indexOf(charset)
+    ? !! ~accepted.indexOf(charset)
    : true;
 };

@@ -129,7 +144,7 @@ req.acceptsCharset = function(charset){
 req.acceptsLanguage = function(lang){
  var accepted = this.acceptedLanguages;
  return accepted.length
-    ? ~accepted.indexOf(lang)
+    ? !! ~accepted.indexOf(lang)
    : true;
 };

@@ -159,6 +174,24 @@ req.range = function(size){
  return parseRange(size, range);
 };

+/**
+ * Return an array of encodings.
+ *
+ * Examples:
+ *
+ *     ['gzip', 'deflate']
+ *
+ * @return {Array}
+ * @api public
+ */
+
+req.__defineGetter__('acceptedEncodings', function(){
+  var accept = this.get('Accept-Encoding');
+  return accept
+    ? accept.trim().split(/ *, */)
+    : [];
+});
+
 /**
 * Return an array of Accepted media types
 * ordered from highest quality to lowest.
@@ -202,7 +235,7 @@ req.__defineGetter__('acceptedLanguages', function(){
  var accept = this.get('Accept-Language');
  return accept
    ? utils
-      .parseQuality(accept)
+      .parseParams(accept)
      .map(function(obj){
        return obj.value;
      })
@@ -226,7 +259,7 @@ req.__defineGetter__('acceptedCharsets', function(){
  var accept = this.get('Accept-Charset');
  return accept
    ? utils
-      .parseQuality(accept)
+      .parseParams(accept)
      .map(function(obj){
        return obj.value;
      })
@@ -245,7 +278,7 @@ req.__defineGetter__('acceptedCharsets', function(){
 * the `connect.bodyParser()` middleware.
 *
 * @param {String} name
- * @param {Mixed} defaultValue
+ * @param {Mixed} [defaultValue]
 * @return {String}
 * @api public
 */
@@ -315,11 +348,10 @@ req.is = function(type){

 req.__defineGetter__('protocol', function(){
  var trustProxy = this.app.get('trust proxy');
-  return this.connection.encrypted
-    ? 'https'
-    : trustProxy
-      ? (this.get('X-Forwarded-Proto') || 'http')
-      : 'http';
+  if (this.connection.encrypted) return 'https';
+  if (!trustProxy) return 'http';
+  var proto = this.get('X-Forwarded-Proto') || 'http';
+  return proto.split(/\s*,\s*/)[0];
 });

 /**
@@ -415,7 +447,7 @@ req.__defineGetter__('auth', function(){

 req.__defineGetter__('subdomains', function(){
  var offset = this.app.get('subdomain offset');
-  return this.get('Host')
+  return (this.host || '')
    .split('.')
    .reverse()
    .slice(offset);
@@ -440,7 +472,11 @@ req.__defineGetter__('path', function(){
 */

 req.__defineGetter__('host', function(){
-  return this.get('Host').split(':')[0];
+  var trustProxy = this.app.get('trust proxy');
+  var host = trustProxy && this.get('X-Forwarded-Host');
+  host = host || this.get('Host');
+  if (!host) return;
+  return host.split(':')[0];
 });

 /**
--- a/lib/response.js
+++ b/lib/response.js
@@ -14,9 +14,9 @@ var http = require('http')
  , cookie = require('cookie')
  , send = require('send')
  , mime = connect.mime
+  , resolve = require('url').resolve
  , basename = path.basename
-  , extname = path.extname
-  , join = path.join;
+  , extname = path.extname;

 /**
 * Response prototype.
@@ -55,7 +55,9 @@ res.status = function(code){
 */

 res.links = function(links){
-  return this.set('Link', Object.keys(links).map(function(rel){
+  var link = this.get('Link') || '';
+  if (link) link += ', ';
+  return this.set('Link', link + Object.keys(links).map(function(rel){
    return '<' + links[rel] + '>; rel="' + rel + '"';
  }).join(', '));
 };
@@ -78,9 +80,12 @@ res.links = function(links){
 */

 res.send = function(body){
-  var req = this.req
-    , head = 'HEAD' == req.method
-    , len;
+  var req = this.req;
+  var head = 'HEAD' == req.method;
+  var len;
+
+  // settings
+  var app = this.app;

  // allow status / body
  if (2 == arguments.length) {
@@ -128,7 +133,7 @@ res.send = function(body){

  // ETag support
  // TODO: W/ support
-  if (len > 1024) {
+  if (app.settings.etag && len && 'GET' == req.method) {
    if (!this.get('ETag')) {
      this.set('ETag', etag(body));
    }
@@ -234,9 +239,10 @@ res.jsonp = function(obj){

  // jsonp
  if (callback) {
+    if (Array.isArray(callback)) callback = callback[0];
    this.set('Content-Type', 'text/javascript');
    var cb = callback.replace(/[^\[\]\w$.]/g, '');
-    body = cb + ' && ' + cb + '(' + body + ');';
+    body = 'typeof ' + cb + ' === \'function\' && ' + cb + '(' + body + ');';
  }

  return this.send(body);
@@ -318,10 +324,10 @@ res.sendfile = function(path, options, fn){
  }

  // streaming
-  function stream() {
+  function stream(stream) {
    if (done) return;
    cleanup();
-    if (fn) self.on('finish', fn);
+    if (fn) stream.on('end', fn);
  }

  // cleanup
@@ -459,17 +465,20 @@ res.format = function(obj){

  var key = req.accepts(keys);

-  this.set('Vary', 'Accept');
+  this.vary("Accept");

  if (key) {
-    this.set('Content-Type', normalizeType(key));
+    var type = normalizeType(key).value;
+    var charset = mime.charsets.lookup(type);
+    if (charset) type += '; charset=' + charset;
+    this.set('Content-Type', type);
    obj[key](req, this, next);
  } else if (fn) {
    fn();
  } else {
    var err = new Error('Not Acceptable');
    err.status = 406;
-    err.types = normalizeTypes(keys);
+    err.types = normalizeTypes(keys).map(function(o){ return o.value });
    next(err);
  }

@@ -580,6 +589,7 @@ res.cookie = function(name, val, options){
  var secret = this.req.secret;
  var signed = options.signed;
  if (signed && !secret) throw new Error('connect.cookieParser("secret") required for signed cookies');
+  if ('number' == typeof val) val = val.toString();
  if ('object' == typeof val) val = 'j:' + JSON.stringify(val);
  if (signed) val = 's:' + sign(val, secret);
  if ('maxAge' in options) {
@@ -595,8 +605,7 @@ res.cookie = function(name, val, options){
 /**
 * Set the location header to `url`.
 *
- * The given `url` can also be the name of a mapped url, for
- * example by default express supports "back" which redirects
+ * The given `url` can also be "back", which redirects
 * to the _Referrer_ or _Referer_ headers or "/".
 *
 * Examples:
@@ -624,23 +633,22 @@ res.cookie = function(name, val, options){

 res.location = function(url){
  var app = this.app
-    , req = this.req;
+    , req = this.req
+    , path;

-  // setup redirect map
-  var map = { back: req.get('Referrer') || '/' };
-
-  // perform redirect
-  url = map[url] || url;
+  // "back" is an alias for the referrer
+  if ('back' == url) url = req.get('Referrer') || '/';

  // relative
  if (!~url.indexOf('://') && 0 != url.indexOf('//')) {
-    var path = app.path();
-
    // relative to path
    if ('.' == url[0]) {
-      url = req.path + '/' + url;
-    // relative to mount-point
+      path = req.originalUrl.split('?')[0];
+      path = path + ('/' == path[path.length - 1] ? '' : '/');
+      url = resolve(path, url);
+      // relative to mount-point
    } else if ('/' != url[0]) {
+      path = app.path();
      url = path + '/' + url;
    }
  }
@@ -672,8 +680,7 @@ res.location = function(url){
 */

 res.redirect = function(url){
-  var app = this.app
-    , head = 'HEAD' == this.req.method
+  var head = 'HEAD' == this.req.method
    , status = 302
    , body;

@@ -713,6 +720,44 @@ res.redirect = function(url){
  this.end(head ? null : body);
 };

+/**
+ * Add `field` to Vary. If already present in the Vary set, then
+ * this call is simply ignored.
+ *
+ * @param {Array|String} field
+ * @param {ServerResponse} for chaining
+ * @api public
+ */
+
+res.vary = function(field){
+  var self = this;
+
+  // nothing
+  if (!field) return this;
+
+  // array
+  if (Array.isArray(field)) {
+    field.forEach(function(field){
+      self.vary(field);
+    });
+    return;
+  }
+
+  var vary = this.get('Vary');
+
+  // append
+  if (vary) {
+    vary = vary.split(/ *, */);
+    if (!~vary.indexOf(field)) vary.push(field);
+    this.set('Vary', vary.join(', '));
+    return this;
+  }
+
+  // set
+  this.set('Vary', field);
+  return this;
+};
+
 /**
 * Render `view` with the given `options` and optional callback `fn`.
 * When a callback function is given a response will _not_ be made
--- a/lib/router/index.js
+++ b/lib/router/index.js
@@ -103,6 +103,9 @@ Router.prototype._dispatch = function(req, res, next){
    // match route
    req.route = route = self.matchRequest(req, i);

+    // implied OPTIONS
+    if (!route && 'OPTIONS' == req.method) return self._options(req, res, next);
+
    // no route
    if (!route) return next(err);
    debug('matched %s %s', route.method, route.path);
@@ -170,6 +173,42 @@ Router.prototype._dispatch = function(req, res, next){
  })(0);
 };

+/**
+ * Respond to __OPTIONS__ method.
+ *
+ * @param {IncomingMessage} req
+ * @param {ServerResponse} res
+ * @api private
+ */
+
+Router.prototype._options = function(req, res, next){
+  var path = parse(req).pathname
+    , body = this._optionsFor(path).join(',');
+  if (!body) return next();
+  res.set('Allow', body).send(body);
+};
+
+/**
+ * Return an array of HTTP verbs or "options" for `path`.
+ *
+ * @param {String} path
+ * @return {Array}
+ * @api private
+ */
+
+Router.prototype._optionsFor = function(path){
+  var self = this;
+  return methods.filter(function(method){
+    var routes = self.map[method];
+    if (!routes || 'options' == method) return;
+    for (var i = 0, len = routes.length; i < len; ++i) {
+      if (routes[i].match(path)) return true;
+    }
+  }).map(function(method){
+    return method.toUpperCase();
+  });
+};
+
 /**
 * Attempt to match a route for `req`
 * with optional starting index of `i`
@@ -245,7 +284,7 @@ Router.prototype.route = function(method, path, callbacks){
  if (!path) throw new Error('Router#' + method + '() requires a path');

  // ensure all callbacks are functions
-  callbacks.forEach(function(fn, i){
+  callbacks.forEach(function(fn){
    if ('function' == typeof fn) return;
    var type = {}.toString.call(fn);
    var msg = '.' + method + '() requires callback functions but got a ' + type;
@@ -264,6 +303,15 @@ Router.prototype.route = function(method, path, callbacks){
  return this;
 };

+Router.prototype.all = function(path) {
+  var self = this;
+  var args = [].slice.call(arguments);
+  methods.forEach(function(method){
+      self.route.apply(self, [method].concat(args));
+  });
+  return this;
+};
+
 methods.forEach(function(method){
  Router.prototype[method] = function(path){
    var args = [method].concat([].slice.call(arguments));
--- a/lib/router/route.js
+++ b/lib/router/route.js
@@ -57,9 +57,15 @@ Route.prototype.match = function(path){
  for (var i = 1, len = m.length; i < len; ++i) {
    var key = keys[i - 1];

-    var val = 'string' == typeof m[i]
-      ? decodeURIComponent(m[i])
-      : m[i];
+    try {
+      var val = 'string' == typeof m[i]
+        ? decodeURIComponent(m[i])
+        : m[i];
+    } catch(e) {
+      var err = new Error("Failed to decode param '" + m[i] + "'");
+      err.status = 400;
+      throw err;
+    }

    if (key) {
      params[key.name] = val;
--- a/lib/utils.js
+++ b/lib/utils.js
@@ -6,6 +6,12 @@
 var mime = require('connect').mime
  , crc32 = require('buffer-crc32');

+/**
+ * toString ref.
+ */
+
+var toString = {}.toString;
+
 /**
 * Return ETag for `body`.
 *
@@ -20,17 +26,15 @@ exports.etag = function(body){

 /**
 * Make `locals()` bound to the given `obj`.
- *  
- * This is used for `app.locals` and `res.locals`. 
+ *
+ * This is used for `app.locals` and `res.locals`.
 *
 * @param {Object} obj
 * @return {Function}
 * @api private
 */

-exports.locals = function(obj){
-  obj.viewCallbacks = obj.viewCallbacks || [];
-
+exports.locals = function(){
  function locals(obj){
    for (var key in obj) locals[key] = obj[key];
    return obj;
@@ -50,6 +54,7 @@ exports.locals = function(obj){
 exports.isAbsolute = function(path){
  if ('/' == path[0]) return true;
  if (':' == path[1] && '\\' == path[2]) return true;
+  if ('\\\\' == path.substring(0, 2)) return true; // Microsoft Azure absolute path
 };

 /**
@@ -77,12 +82,14 @@ exports.flatten = function(arr, ret){
 * Normalize the given `type`, for example "html" becomes "text/html".
 *
 * @param {String} type
- * @return {String}
+ * @return {Object}
 * @api private
 */

 exports.normalizeType = function(type){
-  return ~type.indexOf('/') ? type : mime.lookup(type);
+  return ~type.indexOf('/')
+    ? acceptParams(type)
+    : { value: mime.lookup(type), params: {} };
 };

 /**
@@ -97,9 +104,7 @@ exports.normalizeTypes = function(types){
  var ret = [];

  for (var i = 0; i < types.length; ++i) {
-    ret.push(~types[i].indexOf('/')
-      ? types[i]
-      : mime.lookup(types[i]));
+    ret.push(exports.normalizeType(types[i]));
  }

  return ret;
@@ -125,7 +130,7 @@ exports.acceptsArray = function(types, str){

  for (var i = 0; i < len; ++i) {
    for (var j = 0, jlen = types.length; j < jlen; ++j) {
-      if (exports.accept(normalized[j].split('/'), accepted[i])) {
+      if (exports.accept(normalized[j], accepted[i])) {
        return types[j];
      }
    }
@@ -150,17 +155,34 @@ exports.accepts = function(type, str){
 /**
 * Check if `type` array is acceptable for `other`.
 *
- * @param {Array} type
+ * @param {Object} type
 * @param {Object} other
 * @return {Boolean}
 * @api private
 */

 exports.accept = function(type, other){
-  return (type[0] == other.type || '*' == other.type)
-    && (type[1] == other.subtype || '*' == other.subtype);
+  var t = type.value.split('/');
+  return (t[0] == other.type || '*' == other.type)
+    && (t[1] == other.subtype || '*' == other.subtype)
+    && paramsEqual(type.params, other.params);
 };

+/**
+ * Check if accept params are equal.
+ *
+ * @param {Object} a
+ * @param {Object} b
+ * @return {Boolean}
+ * @api private
+ */
+
+function paramsEqual(a, b){
+  return !Object.keys(a).some(function(k) {
+    return a[k] != b[k];
+  });
+}
+
 /**
 * Parse accept `str`, returning
 * an array objects containing
@@ -175,7 +197,7 @@ exports.accept = function(type, other){

 exports.parseAccept = function(str){
  return exports
-    .parseQuality(str)
+    .parseParams(str)
    .map(function(obj){
      var parts = obj.value.split('/');
      obj.type = parts[0];
@@ -186,44 +208,54 @@ exports.parseAccept = function(str){

 /**
 * Parse quality `str`, returning an
- * array of objects with `.value` and
- * `.quality`.
+ * array of objects with `.value`,
+ * `.quality` and optional `.params`
 *
- * @param {Type} name
- * @return {Type}
+ * @param {String} str
+ * @return {Array}
 * @api private
 */

-exports.parseQuality = function(str){
+exports.parseParams = function(str){
  return str
    .split(/ *, */)
-    .map(quality)
+    .map(acceptParams)
    .filter(function(obj){
      return obj.quality;
    })
    .sort(function(a, b){
-      return b.quality - a.quality;
+      if (a.quality === b.quality) {
+        return a.originalIndex - b.originalIndex;
+      } else {
+        return b.quality - a.quality;
+      }
    });
 };

 /**
- * Parse quality `str` returning an
- * object with `.value` and `.quality`.
+ * Parse accept params `str` returning an
+ * object with `.value`, `.quality` and `.params`.
+ * also includes `.originalIndex` for stable sorting
 *
 * @param {String} str
 * @return {Object}
 * @api private
 */

-function quality(str) {
-  var parts = str.split(/ *; */)
-    , val = parts[0];
+function acceptParams(str, index) {
+  var parts = str.split(/ *; */);
+  var ret = { value: parts[0], quality: 1, params: {}, originalIndex: index };

-  var q = parts[1]
-    ? parseFloat(parts[1].split(/ *= */)[1])
-    : 1;
+  for (var i = 1; i < parts.length; ++i) {
+    var pms = parts[i].split(/ *= */);
+    if ('q' == pms[0]) {
+      ret.quality = parseFloat(pms[1]);
+    } else {
+      ret.params[pms[0]] = pms[1];
+    }
+  }

-  return { value: val, quality: q };
+  return ret;
 }

 /**
@@ -260,7 +292,7 @@ exports.escape = function(html) {
 */

 exports.pathRegexp = function(path, keys, sensitive, strict) {
-  if (path instanceof RegExp) return path;
+  if (toString.call(path) == '[object RegExp]') return path;
  if (Array.isArray(path)) path = '(' + path.join('|') + ')';
  path = path
    .concat(strict ? '' : '/?')
@@ -279,4 +311,4 @@ exports.pathRegexp = function(path, keys, sensitive, strict) {
    .replace(/([\/.])/g, '\\$1')
    .replace(/\*/g, '(.*)');
  return new RegExp('^' + path + '$', sensitive ? '' : 'i');
-}
+}
--- a/lib/view.js
+++ b/lib/view.js
@@ -8,7 +8,7 @@ var path = require('path')
  , dirname = path.dirname
  , basename = path.basename
  , extname = path.extname
-  , exists = fs.existsSync || path.existsSync 
+  , exists = fs.existsSync || path.existsSync
  , join = path.join;

 /**
@@ -22,9 +22,9 @@ module.exports = View;
 *
 * Options:
 *
- *   - `defaultEngine` the default template engine name 
- *   - `engines` template engine require() cache 
- *   - `root` root path for view lookup 
+ *   - `defaultEngine` the default template engine name
+ *   - `engines` template engine require() cache
+ *   - `root` root path for view lookup
 *
 * @param {String} name
 * @param {Object} options
@@ -38,6 +38,7 @@ function View(name, options) {
  var engines = options.engines;
  this.defaultEngine = options.defaultEngine;
  var ext = this.ext = extname(name);
+  if (!ext && !this.defaultEngine) throw new Error('No default engine was specified and no extension was provided.');
  if (!ext) name += (ext = this.ext = ('.' != this.defaultEngine[0] ? '.' : '') + this.defaultEngine);
  this.engine = engines[ext] || (engines[ext] = require(ext.slice(1)).__express);
  this.path = this.lookup(name);
--- a/package.json
+++ b/package.json
@@ -1,37 +1,50 @@
 {
  "name": "express",
  "description": "Sinatra inspired web development framework",
-  "version": "3.1.0",
+  "version": "3.4.8",
  "author": "TJ Holowaychuk <tj@vision-media.ca>",
  "contributors": [
-    { "name": "TJ Holowaychuk", "email": "tj@vision-media.ca" },
-    { "name": "Aaron Heckmann", "email": "aaron.heckmann+github@gmail.com" },
-    { "name": "Ciaran Jessup", "email": "ciaranj@gmail.com" },
-    { "name": "Guillermo Rauch", "email": "rauchg@gmail.com" }
+    {
+      "name": "TJ Holowaychuk",
+      "email": "tj@vision-media.ca"
+    },
+    {
+      "name": "Aaron Heckmann",
+      "email": "aaron.heckmann+github@gmail.com"
+    },
+    {
+      "name": "Ciaran Jessup",
+      "email": "ciaranj@gmail.com"
+    },
+    {
+      "name": "Guillermo Rauch",
+      "email": "rauchg@gmail.com"
+    }
  ],
  "dependencies": {
-    "connect": "2.7.2",
-    "commander": "0.6.1",
+    "connect": "2.12.0",
+    "commander": "1.3.2",
    "range-parser": "0.0.4",
-    "mkdirp": "0.3.3",
-    "cookie": "0.0.5",
-    "buffer-crc32": "0.1.1",
-    "fresh": "0.1.0",
-    "methods": "0.0.1",
-    "send": "0.1.0",
-    "cookie-signature": "0.0.1",
-    "debug": "*"
+    "mkdirp": "0.3.5",
+    "cookie": "0.1.0",
+    "buffer-crc32": "0.2.1",
+    "fresh": "0.2.0",
+    "methods": "0.1.0",
+    "send": "0.1.4",
+    "cookie-signature": "1.0.1",
+    "merge-descriptors": "0.0.1",
+    "debug": ">= 0.7.3 < 1"
  },
  "devDependencies": {
-    "ejs": "*",
-    "mocha": "*",
-    "jade": "*",
-    "hjs": "*",
-    "stylus": "*",
-    "should": "*",
-    "connect-redis": "*",
-    "github-flavored-markdown": "*",
-    "supertest": "0.0.1"
+    "ejs": "~0.8.4",
+    "mocha": "~1.15.1",
+    "jade": "~0.30.0",
+    "hjs": "~0.0.6",
+    "stylus": "~0.40.0",
+    "should": "~2.1.1",
+    "connect-redis": "~1.4.5",
+    "marked": "0.2.10",
+    "supertest": "~0.8.1"
  },
  "keywords": [
    "express",
@@ -46,11 +59,15 @@
  ],
  "repository": "git://github.com/visionmedia/express",
  "main": "index",
-  "bin": { "express": "./bin/express" },
+  "bin": {
+    "express": "./bin/express"
+  },
  "scripts": {
-    "prepublish" : "npm prune",
+    "prepublish": "npm prune",
    "test": "make test"
  },
-  "engines": { "node": "*" }
+  "engines": {
+    "node": ">= 0.8.0"
+  },
+  "license": "MIT"
 }
-
--- a/support/bench
+++ b/support/bench
@@ -1,32 +0,0 @@
-#!/usr/bin/env bash
-
-NODE_ENV=production node ./support/app &
-pid=$!
-
-bench() {
-  ab -n 5000 -c 50 -k -q http://127.0.0.1:8000$1 \
-    | grep "Requests per" \
-    | cut -d ' ' -f 7 \
-    | xargs echo "$2:"
-}
-
-bench_conditional() {
-  ab -n 5000 -c 50 -H "If-None-Match: $3" -k -q http://127.0.0.1:8000$1 \
-    | grep "Requests per" \
-    | cut -d ' ' -f 7 \
-    | xargs echo "$2:"
-}
-
-sleep .5
-bench / "Hello World"
-bench /blog "Mounted Hello World"
-bench /blog/admin "Mounted 2 Hello World"
-bench /middleware "Middleware"
-bench /match "Router"
-bench /render "Render"
-bench /json "JSON tiny"
-bench /json/15 "JSON small"
-bench /json/50 "JSON medium"
-bench /json/150 "JSON large"
-
-kill -9 $pid
--- a/test/Router.js
+++ b/test/Router.js
@@ -2,6 +2,7 @@
 var express = require('../')
  , Router = express.Router
  , request = require('./support/http')
+  , methods = require('methods')
  , assert = require('assert');

 describe('Router', function(){
@@ -100,4 +101,21 @@ describe('Router', function(){
      router.route('get', '/foo', function(){}, function(){});
    })
  })
+
+  describe('.all', function() {
+    it('should support using .all to capture all http verbs', function() {
+      var router = new Router();
+
+      router.all('/foo', function(){});
+
+      var url = '/foo?bar=baz';
+
+      methods.forEach(function testMethod(method) {
+        var route = router.match(method, url);
+        route.constructor.name.should.equal('Route');
+        route.method.should.equal(method);
+        route.path.should.equal('/foo');
+      });
+    })
+  })
 })
--- a/test/acceptance/markdown.js
+++ b/test/acceptance/markdown.js
@@ -7,7 +7,7 @@ describe('markdown', function(){
    it('should respond with html', function(done){
      request(app)
        .get('/')
-        .expect(/<h1>Markdown Example<\/h1>/,done)
+        .expect(/<h1[^>]*>Markdown Example<\/h1>/,done)
    })
  })

--- a/test/app.options.js
+++ b/test/app.options.js
@@ -0,0 +1,61 @@
+
+var express = require('../')
+  , request = require('./support/http');
+
+describe('OPTIONS', function(){
+  it('should default to the routes defined', function(done){
+    var app = express();
+
+    app.del('/', function(){});
+    app.get('/users', function(req, res){});
+    app.put('/users', function(req, res){});
+
+    request(app)
+    .options('/users')
+    .expect('GET,PUT')
+    .expect('Allow', 'GET,PUT', done);
+  })
+
+  it('should not respond if the path is not defined', function(done){
+    var app = express();
+
+    app.get('/users', function(req, res){});
+
+    request(app)
+    .options('/other')
+    .expect(404, done);
+  })
+
+  it('should forward requests down the middleware chain', function(done){
+    var app = express();
+    var router = new express.Router();
+
+    router.get('/users', function(req, res){});
+    app.use(router.middleware);
+    app.get('/other', function(req, res){});
+
+    request(app)
+    .options('/other')
+    .expect('GET')
+    .expect('Allow', 'GET', done);
+  })
+})
+
+describe('app.options()', function(){
+  it('should override the default behavior', function(done){
+    var app = express();
+
+    app.options('/users', function(req, res){
+      res.set('Allow', 'GET');
+      res.send('GET');
+    });
+
+    app.get('/users', function(req, res){});
+    app.put('/users', function(req, res){});
+
+    request(app)
+    .options('/users')
+    .expect('GET')
+    .expect('Allow', 'GET', done);
+  })
+})
--- a/test/app.param.js
+++ b/test/app.param.js
@@ -8,7 +8,7 @@ describe('app', function(){
      var app = express();

      app.param(function(name, regexp){
-        if (regexp instanceof RegExp) {
+        if (Object.prototype.toString.call(regexp) == '[object RegExp]') { // See #1557
          return function(req, res, next, val){
            var captures;
            if (captures = regexp.exec(String(val))) {
@@ -52,13 +52,13 @@ describe('app', function(){

      app.get('/post/:id', function(req, res){
        var id = req.params.id;
-        id.should.be.a('number');
+        id.should.be.a.Number;
        res.send('' + id);
      });

      app.get('/user/:uid', function(req, res){
        var id = req.params.id;
-        id.should.be.a('number');
+        id.should.be.a.Number;
        res.send('' + id);
      });

@@ -87,7 +87,7 @@ describe('app', function(){

      app.get('/user/:id', function(req, res){
        var id = req.params.id;
-        id.should.be.a('number');
+        id.should.be.a.Number;
        res.send('' + id);
      });

--- a/test/app.render.js
+++ b/test/app.render.js
@@ -14,7 +14,7 @@ describe('app', function(){
        done();
      })
    })
-    
+
    it('should support absolute paths with "view engine"', function(done){
      var app = express();

@@ -40,7 +40,7 @@ describe('app', function(){
        done();
      })
    })
-    
+
    it('should support index.<engine>', function(done){
      var app = express();

@@ -59,7 +59,7 @@ describe('app', function(){
        var app = express();
        app.set('views', __dirname + '/fixtures');
        app.render('rawr.jade', function(err){
-          err.message.should.equal('Failed to lookup view "rawr.jade"');
+          err.message.should.equal('Failed to lookup view "rawr.jade" in views directory "' + __dirname + '/fixtures"');
          done();
        });
      })
@@ -109,8 +109,31 @@ describe('app', function(){
        })
      })
    })
+
+    describe('when a "view" constructor is given', function(){
+      it('should create an instance of it', function(done){
+        var app = express();
+
+        function View(name, options){
+          this.name = name;
+          this.path = 'path is required by application.js as a signal of success even though it is not used there.';
+        }
+
+        View.prototype.render = function(options, fn){
+          fn(null, 'abstract engine');
+        };
+
+        app.set('view', View);
+
+        app.render('something', function(err, str){
+          if (err) return done(err);
+          str.should.equal('abstract engine');
+          done();
+        })
+      })
+    })
  })
-  
+
  describe('.render(name, options, fn)', function(){
    it('should render the template', function(done){
      var app = express();
@@ -125,7 +148,7 @@ describe('app', function(){
        done();
      })
    })
-    
+
    it('should expose app.locals', function(done){
      var app = express();

@@ -138,7 +161,7 @@ describe('app', function(){
        done();
      })
    })
-    
+
    it('should give precedence to app.render() locals', function(done){
      var app = express();

--- a/test/app.router.js
+++ b/test/app.router.js
@@ -27,16 +27,54 @@ describe('app.router', function(){
    });
  })

-  it('should decode params', function(done){
-    var app = express();
+  describe('decode querystring', function(){
+    it('should decode correct params', function(done){
+      var app = express();

-    app.get('/:name', function(req, res, next){
-      res.send(req.params.name);
-    });
+      app.get('/:name', function(req, res, next){
+        res.send(req.params.name);
+      });

-    request(app)
-    .get('/foo%2Fbar')
-    .expect('foo/bar', done);
+      request(app)
+      .get('/foo%2Fbar')
+      .expect('foo/bar', done);
+    })
+
+    it('should not accept params in malformed paths', function(done) {
+      var app = express();
+
+      app.get('/:name', function(req, res, next){
+        res.send(req.params.name);
+      });
+
+      request(app)
+      .get('/%foobar')
+      .expect(400, done);
+    })
+
+    it('should not decode spaces', function(done) {
+      var app = express();
+
+      app.get('/:name', function(req, res, next){
+        res.send(req.params.name);
+      });
+
+      request(app)
+      .get('/foo+bar')
+      .expect('foo+bar', done);
+    })
+
+    it('should work with unicode', function(done) {
+      var app = express();
+
+      app.get('/:name', function(req, res, next){
+        res.send(req.params.name);
+      });
+
+      request(app)
+      .get('/%ce%b1')
+      .expect('\u03b1', done);
+    })
  })

  it('should be .use()able', function(done){
@@ -48,7 +86,7 @@ describe('app.router', function(){
      calls.push('before');
      next();
    });
-    
+
    app.use(app.router);

    app.use(function(req, res, next){
@@ -68,7 +106,7 @@ describe('app.router', function(){
      done();
    })
  })
-  
+
  it('should be auto .use()d on the first app.VERB() call', function(done){
    var app = express();

@@ -78,7 +116,7 @@ describe('app.router', function(){
      calls.push('before');
      next();
    });
-    
+
    app.get('/', function(req, res, next){
      calls.push('GET /')
      next();
@@ -109,7 +147,7 @@ describe('app.router', function(){
      .get('/user/12?foo=bar')
      .expect('user', done);
    })
-    
+
    it('should populate req.params with the captures', function(done){
      var app = express();

@@ -124,24 +162,6 @@ describe('app.router', function(){
      .expect('editing user 10', done);
    })
  })
-  
-  describe('when given an array', function(){
-    it('should match all paths in the array', function(done){
-      var app = express();
-      
-      app.get(['/one', '/two'], function(req, res){
-        res.end('works');
-      });
-      
-      request(app)
-      .get('/one')
-      .expect('works', function() {
-        request(app)
-        .get('/two')
-        .expect('works', done);
-      });
-    })
-  })

  describe('case sensitivity', function(){
    it('should be disabled by default', function(done){
@@ -155,7 +175,7 @@ describe('app.router', function(){
      .get('/USER')
      .expect('tj', done);
    })
-    
+
    describe('when "case sensitive routing" is enabled', function(){
      it('should match identical casing', function(done){
        var app = express();
@@ -170,7 +190,7 @@ describe('app.router', function(){
        .get('/uSer')
        .expect('tj', done);
      })
-      
+
      it('should not match otherwise', function(done){
        var app = express();

@@ -199,7 +219,7 @@ describe('app.router', function(){
      .get('/user/')
      .expect('tj', done);
    })
-    
+
    describe('when "strict routing" is enabled', function(){
      it('should match trailing slashes', function(done){
        var app = express();
@@ -214,7 +234,7 @@ describe('app.router', function(){
        .get('/user/')
        .expect('tj', done);
      })
-      
+
      it('should match no slashes', function(done){
        var app = express();

@@ -228,7 +248,7 @@ describe('app.router', function(){
        .get('/user')
        .expect('tj', done);
      })
-      
+
      it('should fail when omitting the trailing slash', function(done){
        var app = express();

@@ -242,7 +262,7 @@ describe('app.router', function(){
        .get('/user')
        .expect(404, done);
      })
-      
+
      it('should fail when adding the trailing slash', function(done){
        var app = express();

@@ -275,7 +295,7 @@ describe('app.router', function(){
      .expect(404, done);
    });
  })
-  
+
  it('should allow literal "."', function(done){
    var app = express();

@@ -303,7 +323,7 @@ describe('app.router', function(){
      .get('/user/tj.json')
      .expect('tj', done);
    })
-    
+
    it('should work with several', function(done){
      var app = express();

@@ -346,7 +366,7 @@ describe('app.router', function(){
      .get('/api/users/0.json')
      .expect('users/0.json', done);
    })
-    
+
    it('should not be greedy immediately after param', function(done){
      var app = express();

@@ -370,7 +390,7 @@ describe('app.router', function(){
      .get('/user/122/aaa')
      .expect('122', done);
    })
-    
+
    it('should span multiple segments', function(done){
      var app = express();

@@ -382,7 +402,7 @@ describe('app.router', function(){
      .get('/file/javascripts/jquery.js')
      .expect('javascripts/jquery.js', done);
    })
-    
+
    it('should be optional', function(done){
      var app = express();

@@ -394,7 +414,7 @@ describe('app.router', function(){
      .get('/file/')
      .expect('', done);
    })
-    
+
    it('should require a preceeding /', function(done){
      var app = express();

@@ -420,7 +440,7 @@ describe('app.router', function(){
      .get('/user/tj')
      .expect('tj', done);
    })
-    
+
    it('should match a single segment only', function(done){
      var app = express();

@@ -432,7 +452,7 @@ describe('app.router', function(){
      .get('/user/tj/edit')
      .expect(404, done);
    })
-    
+
    it('should allow several capture groups', function(done){
      var app = express();

@@ -459,7 +479,7 @@ describe('app.router', function(){
      .get('/user/tj')
      .expect('viewing tj', done);
    })
-    
+
    it('should populate the capture group', function(done){
      var app = express();

@@ -473,7 +493,7 @@ describe('app.router', function(){
      .expect('editing tj', done);
    })
  })
-  
+
  describe('.:name', function(){
    it('should denote a format', function(done){
      var app = express();
@@ -491,7 +511,7 @@ describe('app.router', function(){
      });
    })
  })
-  
+
  describe('.:name?', function(){
    it('should denote an optional format', function(done){
      var app = express();
@@ -509,7 +529,7 @@ describe('app.router', function(){
      });
    })
  })
-  
+
  describe('when next() is called', function(){
    it('should continue lookup', function(done){
      var app = express()
@@ -528,7 +548,7 @@ describe('app.router', function(){
        calls.push('/foo');
        next();
      });
-      
+
      app.get('/foo', function(req, res, next){
        calls.push('/foo 2');
        res.end('done');
@@ -542,7 +562,7 @@ describe('app.router', function(){
      })
    })
  })
-  
+
  describe('when next(err) is called', function(){
    it('should break out of app.router', function(done){
      var app = express()
@@ -561,7 +581,7 @@ describe('app.router', function(){
        calls.push('/foo');
        next(new Error('fail'));
      });
-      
+
      app.get('/foo', function(req, res, next){
        assert(0);
      });
--- a/test/exports.js
+++ b/test/exports.js
@@ -4,10 +4,6 @@ var express = require('../')
  , assert = require('assert');

 describe('exports', function(){
-  it('should have .version', function(){
-    express.should.have.property('version');
-  })
-  
  it('should expose connect middleware', function(){
    express.should.have.property('bodyParser');
    express.should.have.property('session');
@@ -19,19 +15,19 @@ describe('exports', function(){
  })

  it('should expose Router', function(){
-    express.Router.should.be.a('function');
+    express.Router.should.be.a.Function;
  })
-  
+
  it('should expose the application prototype', function(){
-    express.application.set.should.be.a('function');
+    express.application.set.should.be.a.Function;
  })
-  
+
  it('should expose the request prototype', function(){
-    express.request.accepts.should.be.a('function');
+    express.request.accepts.should.be.a.Function;
  })
-  
+
  it('should expose the response prototype', function(){
-    express.response.send.should.be.a('function');
+    express.response.send.should.be.a.Function;
  })

  it('should permit modifying the .application prototype', function(){
@@ -51,7 +47,7 @@ describe('exports', function(){
    .get('/')
    .expect('bar', done);
  })
-  
+
  it('should permit modifying the .response prototype', function(done){
    express.response.foo = function(){ this.send('bar'); };
    var app = express();
--- a/test/req.acceptedEncodings.js
+++ b/test/req.acceptedEncodings.js
@@ -0,0 +1,37 @@
+
+var express = require('../')
+  , request = require('./support/http');
+
+describe('req', function(){
+  describe('.acceptedEncodings', function(){
+    it('should return an array of accepted encodings', function(done){
+      var app = express();
+
+      app.use(function(req, res){
+        req.acceptedEncodings.should.eql(['gzip', 'deflate']);
+        res.end();
+      });
+
+      request(app)
+      .get('/')
+      .set('Accept-Encoding', ' gzip, deflate')
+      .expect(200, done);
+    })
+
+    describe('when Accept-Encoding is not present', function(){
+      it('should default to []', function(done){
+        var app = express();
+
+        app.use(function(req, res){
+          req.acceptedEncodings.should.have.length(0);
+          res.end();
+        });
+
+        request(app)
+        .get('/')
+        .set('Accept-Encoding', '')
+        .expect(200, done);
+      })
+    })
+  })
+})
--- a/test/req.accepts.js
+++ b/test/req.accepts.js
@@ -15,7 +15,7 @@ describe('req', function(){
      .get('/')
      .expect('yes', done);
    })
-    
+
    it('should return true when present', function(done){
      var app = express();

@@ -28,7 +28,7 @@ describe('req', function(){
      .set('Accept', 'application/json')
      .expect('yes', done);
    })
-    
+
    it('should return false otherwise', function(done){
      var app = express();

@@ -56,7 +56,20 @@ describe('req', function(){
    .expect('html', done);
  })

-  describe('.accept(types)', function(){
+  it('should accept an argument list of type names', function(done){
+    var app = express();
+
+    app.use(function(req, res, next){
+      res.end(req.accepts('json', 'html'));
+    });
+
+    request(app)
+    .get('/')
+    .set('Accept', 'application/json')
+    .expect('json', done);
+  })
+
+  describe('.accepts(types)', function(){
    it('should return the first when Accept is not present', function(done){
      var app = express();

--- a/test/req.acceptsCharset.js
+++ b/test/req.acceptsCharset.js
@@ -17,7 +17,7 @@ describe('req', function(){
        .expect('yes', done);
      })
    })
-    
+
    describe('when Accept-Charset is not present', function(){
      it('should return true when present', function(done){
        var app = express();
@@ -31,7 +31,7 @@ describe('req', function(){
        .set('Accept-Charset', 'foo, bar, utf-8')
        .expect('yes', done);
      })
-      
+
      it('should return false otherwise', function(done){
        var app = express();

--- a/test/req.host.js
+++ b/test/req.host.js
@@ -1,18 +1,34 @@

-var express = require('../');
-
-function req(ret) {
-  return {
-      get: function(){ return ret }
-    , __proto__: express.request
-  };
-}
+var express = require('../')
+  , request = require('./support/http')
+  , assert = require('assert');

 describe('req', function(){
  describe('.host', function(){
-    it('should return hostname', function(){
-      req('example.com:3000').host.should.equal('example.com');
-      req('example.com').host.should.equal('example.com');
+    it('should return the Host when present', function(done){
+      var app = express();
+
+      app.use(function(req, res){
+        res.end(req.host);
+      });
+
+      request(app)
+      .post('/')
+      .set('Host', 'example.com')
+      .expect('example.com', done);
+    })
+
+    it('should return undefined otherwise', function(done){
+      var app = express();
+
+      app.use(function(req, res){
+        req.headers.host = null;
+        res.end(String(req.host));
+      });
+
+      request(app)
+      .post('/')
+      .expect('undefined', done);
    })
  })
 })
--- a/test/req.secure.js
+++ b/test/req.secure.js
@@ -0,0 +1,83 @@
+
+var express = require('../')
+  , request = require('./support/http');
+
+describe('req', function(){
+  describe('.secure', function(){
+    describe('when X-Forwarded-Proto is missing', function(){
+      it('should return false when http', function(done){
+        var app = express();
+
+        app.get('/', function(req, res){
+          res.send(req.secure ? 'yes' : 'no');
+        });
+
+        request(app)
+        .get('/')
+        .expect('no', done)
+      })
+    })
+  })
+
+  describe('.secure', function(){
+    describe('when X-Forwarded-Proto is present', function(){
+      it('should return false when http', function(done){
+        var app = express();
+
+        app.get('/', function(req, res){
+          res.send(req.secure ? 'yes' : 'no');
+        });
+
+        request(app)
+        .get('/')
+        .set('X-Forwarded-Proto', 'https')
+        .expect('no', done)
+      })
+
+      it('should return true when "trust proxy" is enabled', function(done){
+        var app = express();
+
+        app.enable('trust proxy');
+
+        app.get('/', function(req, res){
+          res.send(req.secure ? 'yes' : 'no');
+        });
+
+        request(app)
+        .get('/')
+        .set('X-Forwarded-Proto', 'https')
+        .expect('yes', done)
+      })
+
+      it('should return false when initial proxy is http', function(done){
+        var app = express();
+
+        app.enable('trust proxy');
+
+        app.get('/', function(req, res){
+          res.send(req.secure ? 'yes' : 'no');
+        });
+
+        request(app)
+        .get('/')
+        .set('X-Forwarded-Proto', 'http, https')
+        .expect('no', done)
+      })
+
+      it('should return true when initial proxy is https', function(done){
+        var app = express();
+
+        app.enable('trust proxy');
+
+        app.get('/', function(req, res){
+          res.send(req.secure ? 'yes' : 'no');
+        });
+
+        request(app)
+        .get('/')
+        .set('X-Forwarded-Proto', 'https, http')
+        .expect('yes', done)
+      })
+    })
+  })
+})
--- a/test/req.signedCookies.js
+++ b/test/req.signedCookies.js
@@ -5,47 +5,34 @@ var express = require('../')
 describe('req', function(){
  describe('.signedCookies', function(){
    it('should return a signed JSON cookie', function(done){
-      var app = express()
-        , cookieHeader
-        , val;
+      var app = express();

      app.use(express.cookieParser('secret'));

      app.use(function(req, res){
-        res.send(req.signedCookies);
+        if ('/set' == req.path) {
+          res.cookie('obj', { foo: 'bar' }, { signed: true });
+          res.end();
+        } else {
+          res.send(req.signedCookies);
+        }
      });

-      app.response.req = { secret: 'secret' };
-      app.response.cookie('obj', { foo: 'bar' }, { signed: true });
-      cookieHeader = app.response.get('set-cookie');
-
-      val = JSON.stringify({ obj: { foo: 'bar' } });
      request(app)
-      .get('/')
-      .set('Cookie', cookieHeader)
-      .expect(val, done);
-    })
+      .get('/set')
+      .end(function(err, res){
+        if (err) return done(err);
+        var cookie = res.header['set-cookie'];

-    it('should return a signed cookie', function(done){
-      var app = express()
-        , cookieHeader
-        , val;
-
-      app.use(express.cookieParser('secret'));
-
-      app.use(function(req, res){
-        res.send(req.signedCookies);
+        request(app)
+        .get('/')
+        .set('Cookie', cookie)
+        .end(function(err, res){
+          if (err) return don(err);
+          res.body.should.eql({ obj: { foo: 'bar' } });
+          done();
+        });
      });
-
-      app.response.req = { secret: 'secret' };
-      app.response.cookie('foo', 'bar', { signed: true });
-      cookieHeader = app.response.get('set-cookie');
-
-      val = JSON.stringify({ foo: 'bar' });
-      request(app)
-      .get('/')
-      .set('Cookie', cookieHeader)
-      .expect(val, done);
    })
  })
 })
--- a/test/req.subdomains.js
+++ b/test/req.subdomains.js
@@ -15,7 +15,7 @@ describe('req', function(){
        request(app)
        .get('/')
        .set('Host', 'tobi.ferrets.example.com')
-        .expect('["ferrets","tobi"]', done);
+        .expect(["ferrets","tobi"], done);
      })
    })

@@ -30,7 +30,22 @@ describe('req', function(){
        request(app)
        .get('/')
        .set('Host', 'example.com')
-        .expect('[]', done);
+        .expect([], done);
+      })
+    })
+
+    describe('with no host', function(){
+      it('should return an empty array', function(done){
+        var app = express();
+
+        app.use(function(req, res){
+          req.headers.host = null;
+          res.send(req.subdomains);
+        });
+
+        request(app)
+        .get('/')
+        .expect([], done);
      })
    })

@@ -47,7 +62,7 @@ describe('req', function(){
          request(app)
          .get('/')
          .set('Host', 'tobi.ferrets.sub.example.com')
-          .expect('["com","example","sub","ferrets","tobi"]', done);
+          .expect(["com","example","sub","ferrets","tobi"], done);
        })
      })

@@ -63,7 +78,7 @@ describe('req', function(){
          request(app)
          .get('/')
          .set('Host', 'tobi.ferrets.sub.example.com')
-          .expect('["ferrets","tobi"]', done);
+          .expect(["ferrets","tobi"], done);
        })
      })

@@ -79,7 +94,7 @@ describe('req', function(){
          request(app)
          .get('/')
          .set('Host', 'sub.example.com')
-          .expect('[]', done);
+          .expect([], done);
        })
      })
    })
--- a/test/res.format.js
+++ b/test/res.format.js
@@ -53,7 +53,7 @@ app3.use(function(req, res, next){
  })
 });

-describe('req', function(){
+describe('res', function(){
  describe('.format(obj)', function(){
    describe('with canonicalized mime types', function(){
      test(app);
@@ -79,24 +79,41 @@ function test(app) {
    request(app)
    .get('/')
    .set('Accept', 'text/html; q=.5, application/json, */*; q=.1')
-    .expect('{"message":"hey"}', done);
+    .expect({"message":"hey"}, done);
  })

  it('should allow wildcard type/subtypes', function(done){
    request(app)
    .get('/')
    .set('Accept', 'text/html; q=.5, application/*, */*; q=.1')
-    .expect('{"message":"hey"}', done);
+    .expect({"message":"hey"}, done);
  })

  it('should default the Content-Type', function(done){
    request(app)
    .get('/')
    .set('Accept', 'text/html; q=.5, text/plain')
-    .expect('Content-Type', 'text/plain')
+    .expect('Content-Type', 'text/plain; charset=UTF-8')
    .expect('hey', done);
  })

+  it('should set the correct  charset for the Content-Type', function() {
+    request(app)
+    .get('/')
+    .set('Accept', 'text/html')
+    .expect('Content-Type', 'text/html; charset=UTF-8');
+
+    request(app)
+    .get('/')
+    .set('Accept', 'text/plain')
+    .expect('Content-Type', 'text/plain; charset=UTF-8');
+
+    request(app)
+    .get('/')
+    .set('Accept', 'application/json')
+    .expect('Content-Type', 'application/json');
+  })
+
  it('should Vary: Accept', function(done){
    request(app)
    .get('/')
--- a/test/res.jsonp.js
+++ b/test/res.jsonp.js
@@ -16,11 +16,27 @@ describe('res', function(){
      .get('/?callback=something')
      .end(function(err, res){
        res.headers.should.have.property('content-type', 'text/javascript; charset=utf-8');
-        res.text.should.equal('something && something({"count":1});');
+        res.text.should.equal('typeof something === \'function\' && something({"count":1});');
        done();
      })
    })

+    it('should use first callback parameter with jsonp', function(done){
+      var app = express();
+
+      app.use(function(req, res){
+        res.jsonp({ count: 1 });
+      });
+
+      request(app)
+          .get('/?callback=something&callback=somethingelse')
+          .end(function(err, res){
+            res.headers.should.have.property('content-type', 'text/javascript; charset=utf-8');
+            res.text.should.equal('typeof something === \'function\' && something({"count":1});');
+            done();
+          })
+    })
+
    it('should allow renaming callback', function(done){
      var app = express();

@@ -34,10 +50,10 @@ describe('res', function(){
      .get('/?clb=something')
      .end(function(err, res){
        res.headers.should.have.property('content-type', 'text/javascript; charset=utf-8');
-        res.text.should.equal('something && something({"count":1});');
+        res.text.should.equal('typeof something === \'function\' && something({"count":1});');
        done();
      })
-    })      
+    })

    it('should allow []', function(done){
      var app = express();
@@ -50,7 +66,7 @@ describe('res', function(){
      .get('/?callback=callbacks[123]')
      .end(function(err, res){
        res.headers.should.have.property('content-type', 'text/javascript; charset=utf-8');
-        res.text.should.equal('callbacks[123] && callbacks[123]({"count":1});');
+        res.text.should.equal('typeof callbacks[123] === \'function\' && callbacks[123]({"count":1});');
        done();
      })
    })
@@ -66,7 +82,7 @@ describe('res', function(){
      .get('/?callback=foo;bar()')
      .end(function(err, res){
        res.headers.should.have.property('content-type', 'text/javascript; charset=utf-8');
-        res.text.should.equal('foobar && foobar({});');
+        res.text.should.equal('typeof foobar === \'function\' && foobar({});');
        done();
      })
    })
@@ -82,7 +98,7 @@ describe('res', function(){
      .get('/?callback=foo')
      .end(function(err, res){
        res.headers.should.have.property('content-type', 'text/javascript; charset=utf-8');
-        res.text.should.equal('foo && foo({"str":"\\u2028 \\u2029 woot"});');
+        res.text.should.equal('typeof foo === \'function\' && foo({"str":"\\u2028 \\u2029 woot"});');
        done();
      });
    });
@@ -122,7 +138,7 @@ describe('res', function(){
        })
      })
    })
-    
+
    describe('when given an object', function(){
      it('should respond with json', function(done){
        var app = express();
@@ -195,7 +211,7 @@ describe('res', function(){
      })
    })
  })
-  
+
  describe('.json(status, object)', function(){
    it('should respond with json and set the .statusCode', function(done){
      var app = express();
--- a/test/res.links.js
+++ b/test/res.links.js
@@ -3,6 +3,11 @@ var express = require('../')
  , res = express.response;

 describe('res', function(){
+
+  beforeEach(function() {
+    res.removeHeader('link');
+  });
+
  describe('.links(obj)', function(){
    it('should set Link header field', function(){
      res.links({
@@ -15,5 +20,22 @@ describe('res', function(){
          '<http://api.example.com/users?page=2>; rel="next", '
        + '<http://api.example.com/users?page=5>; rel="last"');
    })
+
+    it('should set Link header field for multiple calls', function() {
+      res.links({
+        next: 'http://api.example.com/users?page=2',
+        last: 'http://api.example.com/users?page=5'
+      });
+
+      res.links({
+        prev: 'http://api.example.com/users?page=1',
+      });
+
+      res.get('link')
+      .should.equal(
+          '<http://api.example.com/users?page=2>; rel="next", '
+        + '<http://api.example.com/users?page=5>; rel="last", '
+        + '<http://api.example.com/users?page=1>; rel="prev"');
+    })
  })
 })
--- a/test/res.location.js
+++ b/test/res.location.js
@@ -64,7 +64,7 @@ describe('res', function(){
        request(app)
        .get('/post/1')
        .end(function(err, res){
-          res.headers.should.have.property('location', '/post/1/./edit');
+          res.headers.should.have.property('location', '/post/1/edit');
          done();
        })
      })
@@ -81,7 +81,24 @@ describe('res', function(){
        request(app)
        .get('/post/1')
        .end(function(err, res){
-          res.headers.should.have.property('location', '/post/1/../new');
+          res.headers.should.have.property('location', '/post/new');
+          done();
+        })
+      })
+    })
+
+    describe('with leading ./ and containing ..', function(){
+      it('should construct path-relative urls', function(done){
+        var app = express();
+
+        app.use(function(req, res){
+          res.location('./skip/../../new').end();
+        });
+
+        request(app)
+        .get('/post/1')
+        .end(function(err, res){
+          res.headers.should.have.property('location', '/post/new');
          done();
        })
      })
--- a/test/res.redirect.js
+++ b/test/res.redirect.js
@@ -74,7 +74,7 @@ describe('res', function(){
      })
    })
  })
-  
+
  describe('when accepting html', function(){
    it('should respond with html', function(done){
      var app = express();
@@ -110,7 +110,7 @@ describe('res', function(){
      })
    })
  })
-  
+
  describe('when accepting text', function(){
    it('should respond with text', function(done){
      var app = express();
@@ -169,4 +169,76 @@ describe('res', function(){
      })
    })
  })
+
+  describe('responses redirected to relative paths', function(){
+    function create(depth, parent) {
+      var app = express();
+
+      if (parent) {
+        parent.use('/depth' + depth, app);
+      }
+
+      app.get('/', function(req, res){
+        res.redirect('./index');
+      });
+
+      app.get('/index', function(req, res){
+        res.json({ depth: depth, content: 'index' });
+      });
+
+      return app;
+    }
+
+    var root = create(0);
+    var depth1 = create(1, root);
+    var depth2 = create(2, depth1);
+    var depth3 = create(3, depth2);
+
+    root.use('/depth2', depth2);
+    root.use('/depth3', depth3);
+
+    it('should not contain redundant leading slashes in the location header', function(done){
+      request(root)
+      .get('/')
+      .end(function(err, res){
+        res.headers.location.search(/^\/{2}/).should.equal(-1);
+        done();
+      })
+    })
+
+    it('should preserve context when redirecting nested applications at any depth', function(done){
+      request(root)
+      .get('/depth1')
+      .end(function(err, res){
+        res.headers.should.have.property('location', '/depth1/index');
+
+        request(root)
+        .get('/depth1/depth2')
+        .end(function(err, res){
+          res.headers.should.have.property('location', '/depth1/depth2/index');
+
+          request(root)
+          .get('/depth1/depth2/depth3')
+          .end(function(err, res){
+            res.headers.should.have.property('location', '/depth1/depth2/depth3/index');
+            done();
+          })
+        })
+      });
+    })
+
+    it('should redirect correctly for nested applications that have been remounted', function(done){
+      request(root)
+      .get('/depth2')
+      .end(function(err, res){
+        res.headers.should.have.property('location', '/depth2/index');
+        request(root)
+        .get('/depth3')
+        .end(function(err, res){
+          res.headers.should.have.property('location', '/depth3/index');
+          done();
+        })
+      })
+    })
+  })
 })
--- a/test/res.send.js
+++ b/test/res.send.js
@@ -1,6 +1,7 @@

 var express = require('../')
-  , request = require('./support/http');
+  , request = require('./support/http')
+  , assert = require('assert');

 describe('res', function(){
  describe('.send(null)', function(){
@@ -16,7 +17,7 @@ describe('res', function(){
      .expect('', done);
    })
  })
-  
+
  describe('.send(undefined)', function(){
    it('should set body to ""', function(done){
      var app = express();
@@ -45,7 +46,7 @@ describe('res', function(){
      .expect(201, done);
    })
  })
-  
+
  describe('.send(code, body)', function(){
    it('should set .statusCode and body', function(done){
      var app = express();
@@ -107,7 +108,24 @@ describe('res', function(){
      .expect('ETag', '"-1498647312"')
      .end(done);
    })
-    
+
+    it('should not set ETag for non-GET/HEAD', function(done){
+      var app = express();
+
+      app.use(function(req, res){
+        var str = Array(1024 * 2).join('-');
+        res.send(str);
+      });
+
+      request(app)
+      .post('/')
+      .end(function(err, res){
+        if (err) return done(err);
+        assert(!res.header.etag, 'has an ETag');
+        done();
+      });
+    })
+
    it('should not override Content-Type', function(done){
      var app = express();

@@ -122,7 +140,7 @@ describe('res', function(){
      .expect(200, done);
    })
  })
-  
+
  describe('.send(Buffer)', function(){
    it('should send as octet-stream', function(done){
      var app = express();
@@ -172,7 +190,7 @@ describe('res', function(){
      })
    })
  })
-  
+
  describe('.send(Object)', function(){
    it('should send as application/json', function(done){
      var app = express();
@@ -224,7 +242,7 @@ describe('res', function(){
      })
    })
  })
-  
+
  describe('when .statusCode is 304', function(){
    it('should strip Content-* fields, Transfer-Encoding field, and body', function(done){
      var app = express();
@@ -300,4 +318,77 @@ describe('res', function(){
    .get('/?callback=foo')
    .expect('{"foo":"bar"}', done);
  })
+
+  describe('"etag" setting', function(){
+    describe('when enabled', function(){
+      it('should send ETag even when content-length < 1024', function(done){
+        var app = express();
+
+        app.use(function(req, res){
+          res.send('kajdslfkasdf');
+        });
+
+        request(app)
+        .get('/')
+        .end(function(err, res){
+          res.headers.should.have.property('etag');
+          done();
+        });
+      })
+
+      it('should send ETag ', function(done){
+        var app = express();
+
+        app.use(function(req, res){
+          var str = Array(1024 * 2).join('-');
+          res.send(str);
+        });
+
+        request(app)
+        .get('/')
+        .end(function(err, res){
+          res.headers.should.have.property('etag', '"-1498647312"');
+          done();
+        });
+      });
+    });
+
+    describe('when disabled', function(){
+      it('should send no ETag', function(done){
+        var app = express();
+
+        app.use(function(req, res){
+          var str = Array(1024 * 2).join('-');
+          res.send(str);
+        });
+
+        app.disable('etag');
+
+        request(app)
+        .get('/')
+        .end(function(err, res){
+          res.headers.should.not.have.property('etag');
+          done();
+        });
+      });
+
+      it('should send ETag when manually set', function(done){
+        var app = express();
+
+        app.disable('etag');
+
+        app.use(function(req, res){
+          res.set('etag', 1);
+          res.send(200);
+        });
+
+        request(app)
+        .get('/')
+        .end(function(err, res){
+          res.headers.should.have.property('etag');
+          done();
+        });
+      });
+    });
+  })
 })
--- a/test/res.sendfile.js
+++ b/test/res.sendfile.js
@@ -51,7 +51,7 @@ describe('res', function(){
      .get('/')
      .end(function(err, res){
        assert(1 == calls, 'called too many times');
-        res.text.should.equal("ENOENT, stat 'test/fixtures/nope.html'");
+        res.text.should.startWith("ENOENT, stat");
        res.statusCode.should.equal(200);
        done();
      });
--- a/test/res.vary.js
+++ b/test/res.vary.js
@@ -0,0 +1,55 @@
+
+var express = require('../')
+  , should = require('should');
+
+function response() {
+  var res = Object.create(express.response);
+  res._headers = {};
+  return res;
+}
+
+describe('res.vary()', function(){
+  describe('with no arguments', function(){
+    it('should not set Vary', function(){
+      var res = response();
+      res.vary();
+      should.not.exist(res.get('Vary'));
+    })
+  })
+
+  describe('with an empty array', function(){
+    it('should not set Vary', function(){
+      var res = response();
+      res.vary([]);
+      should.not.exist(res.get('Vary'));
+    })
+  })
+
+  describe('with an array', function(){
+    it('should set the values', function(){
+      var res = response();
+      res.vary(['Accept', 'Accept-Language', 'Accept-Encoding']);
+      res.get('Vary').should.equal('Accept, Accept-Language, Accept-Encoding');
+    })
+  })
+
+  describe('with a string', function(){
+    it('should set the value', function(){
+      var res = response();
+      res.vary('Accept');
+      res.get('Vary').should.equal('Accept');
+    })
+  })
+
+  describe('when the value is present', function(){
+    it('should not add it again', function(){
+      var res = response();
+      res.vary('Accept');
+      res.vary('Accept-Encoding');
+      res.vary('Accept-Encoding');
+      res.vary('Accept-Encoding');
+      res.vary('Accept');
+      res.get('Vary').should.equal('Accept, Accept-Encoding');
+    })
+  })
+})
--- a/test/utils.js
+++ b/test/utils.js
@@ -6,7 +6,7 @@ describe('utils.etag(body)', function(){

  var str = 'Hello CRC';
  var strUTF8 = '<!DOCTYPE html>\n<html>\n<head>\n</head>\n<body><p>自動販売</p></body></html>';
-  
+
  it('should support strings', function(){
    utils.etag(str).should.eql('"-2034458343"');
  })
@@ -27,7 +27,7 @@ describe('utils.isAbsolute()', function(){
    assert(utils.isAbsolute('c:\\'));
    assert(!utils.isAbsolute(':\\'));
  })
-  
+
  it('should unices', function(){
    assert(utils.isAbsolute('/foo/bar'));
    assert(!utils.isAbsolute('foo/bar'));
@@ -49,44 +49,60 @@ describe('utils.escape(html)', function(){
  })
 })

-describe('utils.parseQuality(str)', function(){
+describe('utils.parseParams(str)', function(){
  it('should default quality to 1', function(){
-    utils.parseQuality('text/html')
-      .should.eql([{ value: 'text/html', quality: 1 }]);
+    utils.parseParams('text/html')
+      .should.eql([{ value: 'text/html', quality: 1, params: {}, originalIndex: 0 }]);
  })
-  
-  it('should parse qvalues', function(){
-    utils.parseQuality('text/html; q=0.5')
-      .should.eql([{ value: 'text/html', quality: 0.5 }]);

-    utils.parseQuality('text/html; q=.2')
-      .should.eql([{ value: 'text/html', quality: 0.2 }]);
+  it('should parse qvalues', function(){
+    utils.parseParams('text/html; q=0.5')
+      .should.eql([{ value: 'text/html', quality: 0.5, params: {}, originalIndex: 0 }]);
+
+    utils.parseParams('text/html; q=.2')
+      .should.eql([{ value: 'text/html', quality: 0.2, params: {}, originalIndex: 0 }]);
  })
-  
+
+  it('should parse accept parameters', function(){
+    utils.parseParams('application/json; ver=2.0')
+      .should.eql([{ value: 'application/json', quality: 1, params: {ver: "2.0"}, originalIndex: 0 }]);
+
+    utils.parseParams('text/html; q=0.5; level=2')
+      .should.eql([{ value: 'text/html', quality: 0.5, params: {level: "2"}, originalIndex: 0 }]);
+    utils.parseParams('text/html;q=.2;ver=beta')
+      .should.eql([{ value: 'text/html', quality: 0.2, params: {ver: "beta"}, originalIndex: 0 }]);
+  })
+
  it('should work with messed up whitespace', function(){
-    utils.parseQuality('text/html   ;  q =   .2')
-      .should.eql([{ value: 'text/html', quality: 0.2 }]);
+    utils.parseParams('text/html   ;  q =   .2')
+      .should.eql([{ value: 'text/html', quality: 0.2, params: {}, originalIndex: 0 }]);
  })
-  
+
  it('should work with multiples', function(){
    var str = 'da, en;q=.5, en-gb;q=.8';
-    var arr = utils.parseQuality(str);
+    var arr = utils.parseParams(str);
    arr[0].value.should.equal('da');
    arr[1].value.should.equal('en-gb');
    arr[2].value.should.equal('en');
  })
-  
+
+  it('should work with long lists', function(){
+    var str = 'en, nl, fr, de, ja, it, es, pt, pt-PT, da, fi, nb, sv, ko, zh-Hans, zh-Hant, ru, pl';
+    var arr = utils.parseParams(str).map(function(o){ return o.value });
+    arr.should.eql(str.split(', '));
+  })
+
  it('should sort by quality', function(){
    var str = 'text/plain;q=.2, application/json, text/html;q=0.5';
-    var arr = utils.parseQuality(str);
+    var arr = utils.parseParams(str);
    arr[0].value.should.equal('application/json');
    arr[1].value.should.equal('text/html');
    arr[2].value.should.equal('text/plain');
  })
-  
+
  it('should exclude those with a quality of 0', function(){
    var str = 'text/plain;q=.2, application/json, text/html;q=0';
-    var arr = utils.parseQuality(str);
+    var arr = utils.parseParams(str);
    arr.should.have.length(2);
  })
 })
@@ -96,7 +112,7 @@ describe('utils.parseAccept(str)', function(){
    var arr = utils.parseAccept('text/html');
    arr[0].type.should.equal('text');
  })
-  
+
  it('should provide .subtype', function(){
    var arr = utils.parseAccept('text/html');
    arr[0].subtype.should.equal('html');
@@ -110,7 +126,7 @@ describe('utils.accepts(type, str)', function(){
        .should.equal('text/html');
    })
  })
-  
+
  describe('when a string is empty', function(){
    it('should return the value', function(){
      utils.accepts('text/html', '')
@@ -156,44 +172,44 @@ describe('utils.accepts(type, str)', function(){
      utils.accepts('text/html', 'text/plain, text/html')
        .should.equal('text/html');
    })
-    
+
    it('should return undefined otherwise', function(){
      assert(null == utils.accepts('text/html', 'text/plain, application/json'));
    })
  })
-  
+
  describe('when accepting */subtype', function(){
    it('should return the value when present', function(){
      utils.accepts('text/html', 'text/*')
        .should.equal('text/html');
    })
-    
+
    it('should return undefined otherwise', function(){
      assert(null == utils.accepts('text/html', 'image/*'));
    })
  })
-  
+
  describe('when accepting type/*', function(){
    it('should return the value when present', function(){
      utils.accepts('text/html', '*/html')
        .should.equal('text/html');
    })
-    
+
    it('should return undefined otherwise', function(){
      assert(null == utils.accepts('text/html', '*/json'));
    })
  })
-  
+
  describe('when an extension is given', function(){
    it('should return the value when present', function(){
      utils.accepts('html', 'text/html, application/json')
        .should.equal('html');
    })
-    
+
    it('should return undefined otherwise', function(){
      assert(null == utils.accepts('html', 'text/plain, application/json'));
    })
-    
+
    it('should support *', function(){
      utils.accepts('html', 'text/*')
        .should.equal('html');
@@ -202,4 +218,4 @@ describe('utils.accepts(type, str)', function(){
        .should.equal('html');
    })
  })
-})
+})