sidestep v8 deopt

only will deoptimize decode() instead of all of send()
due to the try/catch

lib/middleware/static.js

@@ -69,6 +69,24 @@ exports = module.exports = function static(root, options){
 
 exports.mime = mime;
 
+/**
+ * decodeURIComponent.
+ *
+ * Allows V8 to only deoptimize this fn instead of all
+ * of send().
+ *
+ * @param {String} path
+ * @api private
+ */
+
+function decode(path){
+  try {
+    return decodeURIComponent(path);
+  } catch (err) {
+    return err;
+  }
+}
+
 /**
  * Attempt to tranfer the requested file to `res`.
  *
@@ -103,14 +121,10 @@ var send = exports.send = function(req, res, next, options){
 
   // parse url
   var url = parse(options.path)
-    , path
+    , path = decode(url.pathname)
     , type;
 
-  try {
-    path = decodeURIComponent(url.pathname)
-  } catch (_) {
-    return next(utils.error(400));
-  }
+  if ('URIError: URI malformed' == path) return next(utils.error(400));
 
   // null byte(s)
   if (~path.indexOf('\0')) return next(utils.error(400));

test/static.js

@@ -187,4 +187,4 @@ describe('connect.static()', function(){
   //     .expect(404, done);
   //   })
   // })
-})
+})