Next | Query returned 43 messages, browsing 21 to 30 | Previous

History of commit frequency

CVS Commit History:


   2017-06-04 17:10:09 by Takahiro Kambe | Files touched by this commit (4)
Log message:
Update ruby-rack to 2.0.3.

pkgsrc change: restrict to ruby22 and ruby23.

Changes are not well documented and commited changes are too many to
summarize here.
   2017-06-03 05:06:01 by Takahiro Kambe | Files touched by this commit (3)
Log message:
Update ruby-rack to 1.6.8.

1.6.8

* prevent exception caused by a race condition on multi-threaded server
  like Puma.

* Handle NULL byte in multipart file name.

1.6.7

* Ensure env values are ASCII 8BIT encoded.

1.6.8

* Fix mistake in encoding change.
   2017-04-22 18:16:29 by Takahiro Kambe | Files touched by this commit (3)
Log message:
Update ruby-rack to 1.6.5.

Sun Dec 4 18:48:03 2015  Jeremy Daer <jeremydaer@gmail.com>

	* First-party "SameSite" cookies. Browsers omit SameSite cookies
	from third-party requests, closing the door on many CSRF attacks.

	Pass `same_site: true` (or `:strict`) to enable:
	    response.set_cookie 'foo', value: 'bar', same_site: true
	or `same_site: :lax` to use Lax enforcement:
	    response.set_cookie 'foo', value: 'bar', same_site: :lax

	Based on version 7 of the Same-site Cookies internet draft:
	https://tools.ietf.org/html/draft-west-first-party-cookies-07

	Thanks to Ben Toews (@mastahyeti) and Bob Long (@bobjflong) for
	updating to drafts 5 and 7.

Wed Jun 24 12:13:37 2015  Aaron Patterson <tenderlove@ruby-lang.org>

	* Fix Ruby 1.8 backwards compatibility
   2015-11-04 03:47:43 by Alistair G. Crooks | Files touched by this commit (758)
Log message:
Add SHA512 digests for distfiles for www category

Problems found locating distfiles:
	Package haskell-cgi: missing distfile haskell-cgi-20001206.tar.gz
	Package nginx: missing distfile array-var-nginx-module-0.04.tar.gz
	Package nginx: missing distfile encrypted-session-nginx-module-0.04.tar.gz
	Package nginx: missing distfile headers-more-nginx-module-0.261.tar.gz
	Package nginx: missing distfile nginx_http_push_module-0.692.tar.gz
	Package nginx: missing distfile set-misc-nginx-module-0.29.tar.gz
	Package nginx-devel: missing distfile echo-nginx-module-0.58.tar.gz
	Package nginx-devel: missing distfile form-input-nginx-module-0.11.tar.gz
	Package nginx-devel: missing distfile lua-nginx-module-0.9.16.tar.gz
	Package nginx-devel: missing distfile nginx_http_push_module-0.692.tar.gz
	Package nginx-devel: missing distfile set-misc-nginx-module-0.29.tar.gz
	Package php-owncloud: missing distfile owncloud-8.2.0.tar.bz2

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.
   2015-06-22 15:59:29 by Takahiro Kambe | Files touched by this commit (3)
Log message:
Update ruby-rack to 1.6.4, security fixes.

* Fix CVE-2015-3225.
* Only count files (not all form elements) against the Multipart File Limit.
* Work around a Rails incompatibility in our private API
   2015-06-11 18:59:50 by Takahiro Kambe | Files touched by this commit (3)
Log message:
Update ruby-rack to 1.6.1.

Update HOMEPAGE.

Changes are not available except commit log:
<https://github.com/rack/rack/commits/1-6-stable>.
   2015-03-13 18:21:19 by Takahiro Kambe | Files touched by this commit (4)
Log message:
Update ruby-rack to 1.6.0.

No exact changes are available.
   2013-03-10 10:25:56 by Takahiro Kambe | Files touched by this commit (4) | Package updated
Log message:
Update ruby-rack to 1.5.2.

== Changes

Please note that this release includes a few potentially breaking changes.
Of particular note are:

 * SessionHash is no longer a Hash sublcass
 * Rack::File cache_control parameter is removed in place of headers options

Additonally, SPEC has been updated in several areas and is now at 1,2.

A new SPEC section was introduced that provides two server-optional IO hijacking
APIs. Further information on these APIs will be made available by the community
in good time. In the mean time, some information can be found in the original
pull request: https://github.com/rack/rack/pull/481

* January 21st, 2013: Thirty third public release 1.5.0
  * Introduced hijack SPEC, for before-response and after-response hijacking
  * SessionHash is no longer a Hash subclass
  * Rack::File cache_control parameter is removed, in place of headers options
  * Rack::Auth::AbstractRequest#scheme now yields strings, not symbols
  * Rack::Utils cookie functions now format expires in RFC 2822 format
  * Rack::File now has a default mime type
  * rackup -b 'run Rack::File.new(".")', option provides command line \ 
configs
  * Rack::Deflater will no longer double encode bodies
  * Rack::Mime#match? provides convenience for Accept header matching
  * Rack::Utils#q_values provides splitting for Accept headers
  * Rack::Utils#best_q_match provides a helper for Accept headers
  * Rack::Handler.pick provides convenience for finding available servers
  * Puma added to the list of default servers (preferred over Webrick)
  * Various middleware now correctly close body when replacing it
  * Rack::Request#params is no longer persistent with only GET params
  * Rack::Request#update_param and #delete_param provide persistent operations
  * Rack::Request#trusted_proxy? now returns true for local unix sockets
  * Rack::Response no longer forces Content-Types
  * Rack::Sendfile provides local mapping configuration options
  * Rack::Utils#rfc2109 provides old netscape style time output
  * Updated HTTP status codes
  * Ruby 1.8.6 likely no longer passes tests, and is no longer fully supported

* January 28th, 2013: Thirty fourth public release 1.5.1
  * Rack::Lint check_hijack now conforms to other parts of SPEC
  * Added hash-like methods to Abstract::ID::SessionHash for compatibility
  * Various documentation corrections

* February 7th, Thirty fifth public release 1.5.2
  * Fix CVE-2013-0263, timing attack against Rack::Session::Cookie
  * Fix CVE-2013-0262, symlink path traversal in Rack::File
  * Add various methods to Session for enhanced Rails compatibility
  * Request#trusted_proxy? now only matches whole stirngs
  * Add JSON cookie coder, to be default in Rack 1.6+ due to security concerns
  * URLMap host matching in environments that don't set the Host header fixed
  * Fix a race condition that could result in overwritten pidfiles
  * Various documentation additions
   2013-02-08 14:22:00 by Takahiro Kambe | Files touched by this commit (2)
Log message:
Update ruby-rack to 1.4.5.

* February 7th, Thirty fifth public release 1.4.5
  * Fix CVE-2013-0263, timing attack against Rack::Session::Cookie
  * Fix CVE-2013-0262, symlink path traversal in Rack::File
   2013-01-31 17:03:34 by Takahiro Kambe | Files touched by this commit (4)
Log message:
Update HOMEPAGE to github's one.

Next | Query returned 43 messages, browsing 21 to 30 | Previous