CVS commit: pkgsrc/www/ruby-rack-ssl

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Fri Mar 13 17:31:37 UTC 2015

Modified Files:
        pkgsrc/www/ruby-rack-ssl: Makefile distinfo
Removed Files:
        pkgsrc/www/ruby-rack-ssl/patches: patch-lib_rack_ssl.rb

Log Message:
Update ruby-rack-ssl to 1.4.1.

* As per spec, don't include STS header in non-https responses
* Handle bad URIs gracefully.

  Some adapters (i.e. jruby-rack) will pass through bad URIs, then display
  the resulting exception. This creates an attack vector for XSS attacks.

* Added more installation/usage instructions into the README

* Return 400 instead of 404 in case of InvalidURIError

* Include Content-Type in 400 response.
  To stay compatible with old Rack versions.

* Skip URI parsing Request#url
  URI may fail to parse some legit URL paths.


To generate a diff of this commit:
cvs rdiff -u -r1.4 -r1.5 pkgsrc/www/ruby-rack-ssl/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/www/ruby-rack-ssl/distinfo
cvs rdiff -u -r1.1 -r0 pkgsrc/www/ruby-rack-ssl/patches/patch-lib_rack_ssl.rb

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.