Subject: CVS commit: pkgsrc/www/py-WebOb
From: Adam Ciarcinski
Date: 2020-01-29 23:47:02
Message id: 20200129224702.947E1FBF4@cvs.NetBSD.org

Log Message:
py-WebOb: updated to 1.8.6

1.8.6:

Experimental Features

- The SameSite value now includes a new option named "None", this is a new
  change that was introduced in
  https://tools.ietf.org/html/draft-west-cookie-incrementalism-00

  Please be aware that older clients are incompatible with this change:
  https://www.chromium.org/updates/same-site/incompatible-clients, WebOb does
  not enable SameSite on cookies by default, so there is no backwards
  incompatible change here.

- Validation of SameSite values can be disabled by toggling a module flag. This
  is in anticipation of future changes in evolving cookie standards.
  The discussion in https://github.com/Pylons/webob/pull/407 (which initially
  expanded the allowed options) notes the sudden change to browser cookie
  implementation details may happen again.

  In May 2019, Google announced a new model for privacy controls in their
  browsers, which affected the list of valid options for the SameSite attribute
  of cookies. In late 2019, the company began to roll out these changes to their
  browsers to force developer adoption of the new specification.
  See https://www.chromium.org/updates/same-site and
  https://blog.chromium.org/2019/10/developers-get-ready-for-new.html for more
  details on this change.

Files:
RevisionActionfile
1.9modifypkgsrc/www/py-WebOb/Makefile
1.9modifypkgsrc/www/py-WebOb/distinfo