Revisions of rubygem-rack
- added rpmlintrc to ignore the rackup shebang line in a test case - updated to new packaging scheme and add gem2rpm.yml
initialized devel package after accepting 176803
- updated to version 1.5.2 * February 7th, Thirty fifth public release 1.5.2 * Fix CVE-2013-0263, timing attack against Rack::Session::Cookie * Fix CVE-2013-0262, symlink path traversal in Rack::File * Add various methods to Session for enhanced Rails compatibility * Request#trusted_proxy? now only matches whole stirngs * Add JSON cookie coder, to be default in Rack 1.6+ due to security concerns * URLMap host matching in environments that don't set the Host header fixed * Fix a race condition that could result in overwritten pidfiles * Various documentation additions
- update to version 1.5.0, remove suffix * Introduced hijack SPEC, for before-response and after-response hijacking * SessionHash is no longer a Hash subclass * Rack::File cache_control parameter is removed, in place of headers options * Rack::Auth::AbstractRequest#scheme now yields strings, not symbols * Rack::Utils cookie functions now format expires in RFC 2822 format * Rack::File now has a default mime type * rackup -b 'run Rack::File.new(".")', option provides command line configs * Rack::Deflater will no longer double encode bodies * Rack::Mime#match? provides convenience for Accept header matching * Rack::Utils#q_values provides splitting for Accept headers * Rack::Utils#best_q_match provides a helper for Accept headers * Rack::Handler.pick provides convenience for finding available servers * Puma added to the list of default servers (preferred over Webrick) * Various middleware now correctly close body when replacing it * Rack::Request#params is no longer persistent with only GET params * Rack::Request#update_param and #delete_param provide persistent operations * Rack::Request#trusted_proxy? now returns true for local unix sockets * Rack::Response no longer forces Content-Types * Rack::Sendfile provides local mapping configuration options * Rack::Utils#rfc2109 provides old netscape style time output * Updated HTTP status codes * Ruby 1.8.6 likely no longer passes tests, and is no longer fully supported - updated to version 1.4.3 * Add warnings when users do not provide a session secret * Fix parsing performance for unquoted filenames * Updated URI backports * Fix URI backport version matching, and silence constant warnings * Correct parameter parsing with empty values
Displaying revisions 61 - 70 of 70