Path to this page:
Subject: CVS commit: pkgsrc/www/py-websockets
From: Adam Ciarcinski
Date: 2018-06-18 12:46:26
Message id: 20180618104626.ED7DDFBEC@cvs.NetBSD.org
Log Message:
py-websockets: updated to 5.0.1
5.0.1
Version 5.0 fixes a security issue introduced in version 4.0.
websockets 4.0 was vulnerable to denial of service by memory exhaustion because \
it didn't enforce max_size when decompressing compressed messages.
Also:
:func:~client.connect() performs HTTP Basic Auth when the URI contains credentials.
Iterating on incoming messages no longer raises an exception when the connection \
terminates with code 1001 (going away).
A plain HTTP request now receives a 426 Upgrade Required response and doesn't \
log a stack trace.
:func:~server.unix_serve can be used as an asynchronous context manager on \
Python ≥ 3.5.1.
Added :meth:~protocol.WebSocketCommonProtocol.closed property.
If a :meth:~protocol.WebSocketCommonProtocol.ping doesn't receive a pong, it's \
cancelled when the connection is closed.
Reported the cause of :exc:~exceptions.ConnectionClosed exceptions.
Added new examples in the documentation.
Updated documentation with new features from Python 3.6.
Improved several other sections of the documentation.
Fixed missing close code, which caused :exc:TypeError on connection close.
Fixed a race condition in the closing handshake that raised \
:exc:~exceptions.InvalidState.
Stopped logging stack traces when the TCP connection dies prematurely.
Prevented writing to a closing TCP connection during unclean shutdowns.
Made connection termination more robust to network congestion.
Prevented processing of incoming frames after failing the connection.
Files: