./www/ruby-http-cookie, Ruby library to handle HTTP Cookies based on RFC 6265

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: pkgsrc-2016Q3, Version: 1.0.3, Package name: ruby22-http-cookie-1.0.3, Maintainer: taca

HTTP::Cookie is a ruby library to handle HTTP cookies in a way both
compliant with RFCs and compatible with today's major browsers.

It was originally a part of the
[Mechanize](https://github.com/sparklemotion/mechanize) library,
separated as an independent library in the hope of serving as a common
component that is reusable from any HTTP related piece of software.

The following is an incomplete list of its features:

* Its behavior is highly compatible with that of today's major web
browsers.

* It is based on and conforms to RFC 6265 (the latest standard for the
HTTP cookie mechanism) to a high extent, with real world conventions
deeply in mind.

* It takes eTLD (effective TLD, also known as "Public Suffix") into
account just as major browsers do, to reject cookies with an eTLD
domain like "org", "co.jp", or "appspot.com". This feature is
brought to you by the domain_name gem.

* The number of cookies and the size are properly capped so that a
cookie store does not get flooded.

* It supports the legacy Netscape cookies.txt format for
serialization, maximizing the interoperability with other
implementations.

* It supports the cookies.sqlite format adopted by Mozilla Firefox for
backend store database which can be shared among multiple program
instances.

* It is relatively easy to add a new serialization format or a backend
store because of its modular API.

Master sites:

SHA1: 34c03e5f450d33591f47d9934dd9315577a3da57
RMD160: 2a9f8615630a5ceafde2facce672d0b6b3eaae2c
Filesize: 37.5 KB

Version history: (Expand)

CVS history: (Expand)


   2016-10-01 15:46:36 by Benny Siegert | Files touched by this commit (2) 
Log message:
Pullup ticket #5112 - requested by taca
www/ruby-http-cookie: security fix

Revisions pulled up:
- www/ruby-http-cookie/Makefile                                 1.2
- www/ruby-http-cookie/distinfo                                 1.3

---
   Module Name:	pkgsrc
   Committed By:	taca
   Date:		Fri Sep 30 15:36:59 UTC 2016

   Modified Files:
   	pkgsrc/www/ruby-http-cookie: Makefile distinfo

   Log message:
   Update ruby-http-cookie to 1.0.3.

   ## 1.0.3 (2016-09-30)

   - Treat comma as normal character in HTTP::Cookie.cookie_value_to_hash
     instead of key-value pair separator.  This should fix the problem
     described in CVE-2016-7401.