pkgsrc-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: pkgsrc/www/p5-Plack



Module Name:    pkgsrc
Committed By:   wen
Date:           Mon Aug  4 11:07:20 UTC 2014

Modified Files:
        pkgsrc/www/p5-Plack: Makefile distinfo

Log Message:
Update to 1.0031

Upstream changes:
1.0031  2014-08-01 13:19:14 PDT
    [SECURITY]
        - Plack::App::File would previously strip trailing slashes off
          provided paths. This in combination with the common pattern
          of serving files with Plack::Middleware::Static could allow
          an attacker to bypass a whitelist of generated files (avar) #446

    [IMPROVEMENTS]
        - Let HTTP::Message::PSGI warn in case of invalid PSGI response 
(wchristian) #437
        - Update documentation on how response_cb works with writer (doy)
        - Make AccessLog work on non-POSIX environment (dex4er) #442
        - Plack::App::WrapCGI no longer warns under 5.19.9 (frew)
        - Avoid Rosetta Flash attack in JSONP middleware (nichtich) #464
        - Fix Plack::Util::inline_object to make it work with can() as a class 
method

    [NEW FEATURES]
        - Add $req->query_string shortcut to access QUERY_STRING in PSGI 
environment


To generate a diff of this commit:
cvs rdiff -u -r1.30 -r1.31 pkgsrc/www/p5-Plack/Makefile
cvs rdiff -u -r1.23 -r1.24 pkgsrc/www/p5-Plack/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.




Home | Main Index | Thread Index | Old Index