File rubygem-actionpack-1_12.changes of Package rubygem-actionpack-1_12
-------------------------------------------------------------------
Wed Feb 20 23:17:46 CET 2008 - mrueckert@suse.de
- do not obsolete the old name as it leads to trouble on upgrade.
this will handled by the wrapper package.
-------------------------------------------------------------------
Thu Jan 17 15:18:39 CET 2008 - mrueckert@suse.de
- update to version 1.12.5 (including changes from 1.12.4)
- Updated security fix
- Documentation fix: integration test scripts don't require
integration_test. #4914 [Frederick Ros <sl33p3r@free.fr>]
- ActionController::Base Summary documentation rewrite.
#4900 [kevin.clark@gmail.com]
- Fix text_helper.rb documentation rendering.
#4725 [Frederick Ros]
- Fixes bad rendering of JavaScriptMacrosHelper rdoc.
#4910 [Frederick Ros]
- Enhance documentation for setting headers in integration tests.
Skip auto HTTP prepending when its already there.
#4079 [Rick Olson]
- Documentation for AbstractRequest. #4895 [kevin.clark@gmail.com]
- Remove all remaining references to @params in the
documentation. [Marcel Molina Jr.]
- Add documentation for redirect_to :back's RedirectBackError
exception. [Marcel Molina Jr.]
- Update layout and content_for documentation to use yield rather
than magic @content_for instance variables. [Marcel Molina Jr.]
- Cache CgiRequest#request_parameters so that multiple calls
don't re-parse multipart data. [Rick]
- Fixed that remote_form_for can leave out the object parameter
and default to the instance variable of the object_name, just
like form_for [DHH]
- Added ActionController.filter_parameter_logging that makes it
easy to remove passwords, credit card numbers, and other
sensitive information from being logged when a request is
handled. #1897 [jeremye@bsa.ca.gov]
- Fixed that real files and symlinks should be treated the same
when compiling templates. #5438 [zachary@panandscan.com]
- Add :status option to send_data and send_file. Defaults to '200
OK'. #5243 [Manfred Stienstra <m.stienstra@fngtps.com>]
- Update documentation for erb trim syntax.
#5651 [matt@mattmargolis.net]
- Short documentation to mention use of Mime::Type.register.
#5710 [choonkeat@gmail.com]
- rename the package to rubygem-actionpack-1_12 to allow parallel
installation with other major branches.
- removed actionpack-1.12.3_routing_bug_secfix.patch:
included in version update
-------------------------------------------------------------------
Fri Nov 23 00:30:27 CET 2007 - mrueckert@suse.de
- updated rubygem-actionpack-1.12.x_session_fixation_attack.patch
new name rubygem-actionpack-1.12.x_session_fixation_attack_v2.patch:
The original upstream patch only worked for the first request.
Do not delete the cookie_only option from the session options.
(#332441) (CVE-2007-6077)
-------------------------------------------------------------------
Wed Oct 17 16:47:39 CEST 2007 - mrueckert@suse.de
- added rubygem-actionpack-1.12.x_session_fixation_attack.patch:
Reject session informations from the query string (#332441)
(CVE-2007-5380)
-------------------------------------------------------------------
Thu Aug 17 13:49:34 CEST 2006 - mrueckert@suse.de
- added actionpack-1.12.3_routing_bug_secfix.patch:
Fixes (#198407): A bug in the routing bug allows code injection.
http://weblog.rubyonrails.org/2006/8/10/rails-1-1-6-backports-and-full-disclosure
-------------------------------------------------------------------
Sat Jul 1 04:21:38 CEST 2006 - mrueckert@suse.de
- update to version 1.12.3:
* Fix broken traverse_to_controller. We now:
Look for a _controller.rb file under RAILS_ROOT to load.
If we find it, we require_dependency it and return the
controller it defined. (If none was defined we stop looking.)
If we don't find it, we look for a .rb file under RAILS_ROOT
to load. If we find it, and it loads a constant we keep
looking. Otherwise we check to see if a directory of the same
name exists, and if it does we create a module for it.
* Refinement to avoid exceptions in traverse_to_controller.
* (Hackish) Fix loading of arbitrary files in Ruby's load path
* by traverse_to_controller. [Nicholas Seckar]
-------------------------------------------------------------------
Wed Jun 21 01:06:03 CEST 2006 - mrueckert@suse.de
- use rubygems_with_buildroot_patch instead of the versioned
buildrequires
-------------------------------------------------------------------
Mon Jun 19 18:37:41 CEST 2006 - mrueckert@suse.de
- Initial package version 1.12.1
