Mini Shell

Direktori : /opt/cpanel/ea-ruby27/root/usr/share/gems/doc/rack-2.2.8/ri/
Current File : //opt/cpanel/ea-ruby27/root/usr/share/gems/doc/rack-2.2.8/ri/page-CHANGELOG_md.ri
U:RDoc::TopLevel[	iI"CHANGELOG.md:ETcRDoc::Parser::Markdowno:RDoc::Markup::Document:@parts[�S:RDoc::Markup::Heading:
leveli:	textI"Changelog;To:RDoc::Markup::Paragraph;[I"�All notable changes to this project will be documented in this file. For info on how to format all future additions to this file please reference {Keep A Changelog}[https://keepachangelog.com/en/1.0.0/].;TS;	;
i;I"[2.2.7] - 2023-03-13;To:RDoc::Markup::List:
@type:BULLET:@items[o:RDoc::Markup::ListItem:@label0;[o;;[I"�Correct the year number in the changelog ({#2015}[https://github.com/rack/rack/pull/2015], {@kimulab}[https://github.com/kimulab]);To;;0;[o;;[I"�Support underscore in host names for Rack 2.2 (Fixes {#2070}[https://github.com/rack/rack/issues/2070]) ({#2015}[https://github.com/rack/rack/pull/2071], {@jeremyevans}[https://github.com/jeremyevans]);TS;	;
i;I"[2.2.6.4] - 2023-03-13;To;
;;;[o;;0;[o;;[I"3[CVE-2023-27539] Avoid ReDoS in header parsing;TS;	;
i;I"[2.2.6.3] - 2023-03-02;To;
;;;[o;;0;[o;;[I"O[CVE-2023-27530] Introduce multipart_total_part_limit to limit total parts;TS;	;
i;I"[2.2.6.2] - 2023-01-17;To;
;;;[o;;0;[o;;[I">[CVE-2022-44570] Fix ReDoS in Rack::Utils.get_byte_ranges;TS;	;
i;I"[2.2.6.1] - 2023-01-17;To;
;;;[o;;0;[o;;[I"A[CVE-2022-44571] Fix ReDoS vulnerability in multipart parser;To;;0;[o;;[I"J[CVE-2022-44572] Forbid control characters in attributes (also ReDoS);TS;	;
i;I"[2.2.6] - 2023-01-17;To;
;;;[o;;0;[o;;[I"�Extend <code>Rack::MethodOverride</code> to handle <code>QueryParser::ParamsTooDeepError</code> error. ({#2011}[https://github.com/rack/rack/pull/2011], {@byroot}[https://github.com/byroot]);TS;	;
i;I"[2.2.5] - 2022-12-27;TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"�<code>Rack::URLMap</code> uses non-deprecated form of <code>Regexp.new</code>. ({#1998}[https://github.com/rack/rack/pull/1998], {@weizheheng}[https://github.com/weizheheng]);TS;	;
i;I"[2.2.4] - 2022-06-30;To;
;;;[o;;0;[o;;[I"�Better support for lower case headers in <code>Rack::ETag</code> middleware. ({#1919}[https://github.com/rack/rack/pull/1919], {@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�Use custom exception on params too deep error. ({#1838}[https://github.com/rack/rack/pull/1838], {@simi}[https://github.com/simi]);TS;	;
i;I"[2.2.3.1] - 2022-05-27;TS;	;
i;I"
Security;To;
;;;[o;;0;[o;;[I"?[CVE-2022-30123] Fix shell escaping issue in Common Logger;To;;0;[o;;[I"A[CVE-2022-30122] Restrict parsing of broken MIME attachments;TS;	;
i;I"[2.2.3] - 2020-02-11;TS;	;
i;I"
Security;To;
;;;[o;;0;[o;;[I".[CVE-2020-8184] Only decode cookie values;TS;	;
i;I"[2.2.2] - 2020-02-11;TS;	;
i;I"
Fixed;To;
;;;[	o;;0;[o;;[I"�Fix incorrect <code>Rack::Request#host</code> value. ({#1591}[https://github.com/rack/rack/pull/1591], {@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�Revert <code>Rack::Handler::Thin</code> implementation. ({#1583}[https://github.com/rack/rack/pull/1583], {@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�Double assignment is still needed to prevent an "unused variable" warning. ({#1589}[https://github.com/rack/rack/pull/1589], {@kamipo}[https://github.com/kamipo]);To;;0;[o;;[I"�Fix to handle same_site option for session pool. ({#1587}[https://github.com/rack/rack/pull/1587], {@kamipo}[https://github.com/kamipo]);TS;	;
i;I"[2.2.1] - 2020-02-09;TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"�Rework <code>Rack::Request#ip</code> to handle empty <code>forwarded_for</code>. ({#1577}[https://github.com/rack/rack/pull/1577], {@ioquatix}[https://github.com/ioquatix]);TS;	;
i;I"[2.2.0] - 2020-02-08;TS;	;
i;I"SPEC Changes;To;
;;;[	o;;0;[o;;[I"�<code>rack.session</code> request environment entry must respond to <code>to_hash</code> and return unfrozen Hash. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"[Request environment cannot be frozen. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�CGI values in the request environment with non-ASCII characters must use ASCII-8BIT encoding. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�Improve SPEC/lint relating to SERVER_NAME, SERVER_PORT and HTTP_HOST. ({#1561}[https://github.com/rack/rack/pull/1561], {@ioquatix}[https://github.com/ioquatix]);TS;	;
i;I"
Added;To;
;;;[o;;0;[o;;[I"�<code>rackup</code> supports multiple <code>-r</code> options and will require all arguments. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Server</code> supports an array of paths to require for the <code>:require</code> option. ({@khotta}[https://github.com/khotta]);To;;0;[o;;[I"g<code>Files</code> supports multipart range requests. ({@fatkodima}[https://github.com/fatkodima]);To;;0;[o;;[I"�<code>Multipart::UploadedFile</code> supports an IO-like object instead of using the filesystem, using <code>:filename</code> and <code>:io</code> options. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Multipart::UploadedFile</code> supports keyword arguments <code>:path</code>, <code>:content_type</code>, and <code>:binary</code> in addition to positional arguments. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Static</code> supports a <code>:cascade</code> option for calling the app if there is no matching file. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"f<code>Session::Abstract::SessionHash#dig</code>. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Response.[]</code> and <code>MockResponse.[]</code> for creating instances using status, headers, and body. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�Convenient cache and content type methods for <code>Rack::Response</code>. ({#1555}[https://github.com/rack/rack/pull/1555], {@ioquatix}[https://github.com/ioquatix]);TS;	;
i;I"Changed;To;
;;;[o;;0;[o;;[I"m<code>Request#params</code> no longer rescues EOFError. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Directory</code> uses a streaming approach, significantly improving time to first byte for large directories. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Directory</code> no longer includes a Parent directory link in the root directory index. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>QueryParser#parse_nested_query</code> uses original backtrace when reraising exception with new class. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>ConditionalGet</code> follows RFC 7232 precedence if both If-None-Match and If-Modified-Since headers are provided. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"|<code>.ru</code> files supports the <code>frozen-string-literal</code> magic comment. ({@eregon}[https://github.com/eregon]);To;;0;[o;;[I"�Rely on autoload to load constants instead of requiring internal files, make sure to require 'rack' and not just 'rack/...'. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"<code>Etag</code> will continue sending ETag even if the response should not be cached. ({@henm}[https://github.com/henm]);To;;0;[o;;[I"�<code>Request#host_with_port</code> no longer includes a colon for a missing or empty port. ({@AlexWayfer}[https://github.com/AlexWayfer]);To;;0;[o;;[I"yAll handlers uses keywords arguments instead of an options hash argument. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�<code>Files</code> handling of range requests no longer return a body that supports <code>to_path</code>, to ensure range requests are handled correctly. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"<code>Multipart::Generator</code> only includes <code>Content-Length</code> for files with paths, and <code>Content-Disposition</code> <code>filename</code> if the <code>UploadedFile</code> instance has one. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Request#ssl?</code> is true for the <code>wss</code> scheme (secure websockets). ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Rack::HeaderHash</code> is memoized by default. ({#1549}[https://github.com/rack/rack/pull/1549], {@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�<code>Rack::Directory</code> allow directory traversal inside root directory. ({#1417}[https://github.com/rack/rack/pull/1417], {@ThomasSevestre}[https://github.com/ThomasSevestre]);To;;0;[o;;[I"�Sort encodings by server preference. ({#1184}[https://github.com/rack/rack/pull/1184], {@ioquatix}[https://github.com/ioquatix], {@wjordan}[https://github.com/wjordan]);To;;0;[o;;[I"}Rework host/hostname/authority implementation in <code>Rack::Request</code>. <code>#host</code> and <code>#host_with_port</code> have been changed to correctly return IPv6 addresses formatted with square brackets, as defined by {RFC3986}[https://tools.ietf.org/html/rfc3986#section-3.2.2]. ({#1561}[https://github.com/rack/rack/pull/1561], {@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�<code>Rack::Builder</code> parsing options on first <code>#\</code> line is deprecated. ({#1574}[https://github.com/rack/rack/pull/1574], {@ioquatix}[https://github.com/ioquatix]);TS;	;
i;I"Removed;To;
;;;[o;;0;[o;;[I"}<code>Directory#path</code> as it was not used and always returned nil. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>BodyProxy#each</code> as it was only needed to work around a bug in Ruby <1.9.3. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>URLMap::INFINITY</code> and <code>URLMap::NEGATIVE_INFINITY</code>, in favor of <code>Float::INFINITY</code>. ({@ch1c0t}[https://github.com/ch1c0t]);To;;0;[o;;[I"�Deprecation of <code>Rack::File</code>. It will be deprecated again in rack 2.2 or 3.0. ({@rafaelfranca}[https://github.com/rafaelfranca]);To;;0;[o;;[I"\Support for Ruby 2.2 as it is well past EOL. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�Remove <code>Rack::Files#response_body</code> as the implementation was broken. ({#1153}[https://github.com/rack/rack/pull/1153], {@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�Remove <code>SERVER_ADDR</code> which was never part of the original SPEC. ({#1573}[https://github.com/rack/rack/pull/1573], {@ioquatix}[https://github.com/ioquatix]);TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"�<code>Directory</code> correctly handles root paths containing glob metacharacters. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Cascade</code> uses a new response object for each call if initialized with no apps. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>BodyProxy</code> correctly delegates keyword arguments to the body object on Ruby 2.7+. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>BodyProxy#method</code> correctly handles methods delegated to the body object. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Request#host</code> and <code>Request#host_with_port</code> handle IPv6 addresses correctly. ({@AlexWayfer}[https://github.com/AlexWayfer]);To;;0;[o;;[I"�<code>Lint</code> checks when response hijacking that <code>rack.hijack</code> is called with a valid object. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Response#write</code> correctly updates <code>Content-Length</code> if initialized with a body. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"q<code>CommonLogger</code> includes <code>SCRIPT_NAME</code> when logging. ({@Erol}[https://github.com/Erol]);To;;0;[o;;[I"�<code>Utils.parse_nested_query</code> correctly handles empty queries, using an empty instance of the params class instead of a hash. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"`<code>Directory</code> correctly escapes paths in links. ({@yous}[https://github.com/yous]);To;;0;[o;;[I"�<code>Request#delete_cookie</code> and related <code>Utils</code> methods handle <code>:domain</code> and <code>:path</code> options in same call. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�<code>Request#delete_cookie</code> and related <code>Utils</code> methods do an exact match on <code>:domain</code> and <code>:path</code> options. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"<code>Static</code> no longer adds headers when a gzipped file request has a 304 response. ({@chooh}[https://github.com/chooh]);To;;0;[o;;[I"�<code>ContentLength</code> sets <code>Content-Length</code> response header even for bodies not responding to <code>to_ary</code>. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"�Thin handler supports options passed directly to <code>Thin::Controllers::Controller</code>. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"yWEBrick handler no longer ignores <code>:BindAddress</code> option. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"l<code>ShowExceptions</code> handles invalid POST data. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"~Basic authentication requires a password, even if the password is empty. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"{<code>Lint</code> checks response is array with 3 elements, per SPEC. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"bSupport for using <code>:SSLEnable</code> option when using WEBrick handler. (Gregor Melhorn);To;;0;[o;;[I"fClose response body after buffering it when buffering. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"iOnly accept <code>;</code> as delimiter when parsing cookies. ({@mrageh}[https://github.com/mrageh]);To;;0;[o;;[I"q<code>Utils::HeaderHash#clear</code> clears the name mapping as well. ({@raxoft}[https://github.com/raxoft]);To;;0;[o;;[I"�Support for passing <code>nil</code> <code>Rack::Files.new</code>, which notably fixes Rails' current <code>ActiveStorage::FileServer</code> implementation. ({@ioquatix}[https://github.com/ioquatix]);TS;	;
i;I"Documentation;To;
;;;[o;;0;[o;;[I">CHANGELOG updates. ({@aupajo}[https://github.com/aupajo]);To;;0;[o;;[I"RAdded {CONTRIBUTING}[CONTRIBUTING.md]. ({@dblock}[https://github.com/dblock]);TS;	;
i;I"[2.1.2] - 2020-01-27;To;
;;;[o;;0;[o;;[I"rFix multipart parser for some files to prevent denial of service ({@aiomaster}[https://github.com/aiomaster]);To;;0;[o;;[I"eFix <code>Rack::Builder#use</code> with keyword arguments ({@kamipo}[https://github.com/kamipo]);To;;0;[o;;[I"mSkip deflating in Rack::Deflater if Content-Length is 0 ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"jRemove <code>SessionHash#transform_keys</code>, no longer needed ({@pavel}[https://github.com/pavel]);To;;0;[o;;[I"hAdd to_hash to wrap Hash and Session classes ({@oleh-demyanyuk}[https://github.com/oleh-demyanyuk]);To;;0;[o;;[I"oHandle case where session id key is requested but missing ({@jeremyevans}[https://github.com/jeremyevans]);TS;	;
i;I"[2.1.1] - 2020-01-12;To;
;;;[o;;0;[o;;[I"�Remove <code>Rack::Chunked</code> from <code>Rack::Server</code> default middleware. ({#1475}[https://github.com/rack/rack/pull/1475], {@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"vRestore support for code relying on <code>SessionId#to_s</code>. ({@jeremyevans}[https://github.com/jeremyevans]);TS;	;
i;I"[2.1.0] - 2020-01-10;TS;	;
i;I"
Added;To;
;;;[o;;0;[o;;[I"hAdd support for <code>SameSite=None</code> cookie value. ({@hennikul}[https://github.com/hennikul]);To;;0;[o;;[I"JAdd trailer headers. ({@eileencodes}[https://github.com/eileencodes]);To;;0;[o;;[I"KAdd MIME Types for video streaming. ({@styd}[https://github.com/styd]);To;;0;[o;;[I"KAdd MIME Type for WASM. ({@buildrtech}[https://github.com/buildrtech]);To;;0;[o;;[I"\Add <code>Early Hints(103)</code> to status codes. ({@egtra}[https://github.com/egtra]);To;;0;[o;;[I"^Add <code>Too Early(425)</code> to status codes. ({@y-yagi}[(https://github.com/y-yagi)]);To;;0;[o;;[I"mAdd <code>Bandwidth Limit Exceeded(509)</code> to status codes. ({@CJKinni}[https://github.com/CJKinni]);To;;0;[o;;[I"cAdd method for custom <code>ip_filter</code>. ({@svcastaneda}[https://github.com/svcastaneda]);To;;0;[o;;[I"pAdd boot-time profiling capabilities to <code>rackup</code>. ({@tenderlove}[https://github.com/tenderlove]);To;;0;[o;;[I"qAdd multi mapping support for <code>X-Accel-Mappings</code> header. ({@yoshuki}[https://github.com/yoshuki]);To;;0;[o;;[I"TAdd <code>sync: false</code> option to <code>Rack::Deflater</code>. (Eric Wong);To;;0;[o;;[I"�Add <code>Builder#freeze_app</code> to freeze application and all middleware instances. ({@jeremyevans}[https://github.com/jeremyevans]);To;;0;[o;;[I"tAdd API to extract cookies from <code>Rack::MockResponse</code>. ({@petercline}[https://github.com/petercline]);TS;	;
i;I"Changed;To;
;;;[o;;0;[o;;[I"[Don't propagate nil values from middleware. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"sLazily initialize the response body and only buffer it if required. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"oFix deflater zlib buffer errors on empty body part. ({@felixbuenemann}[https://github.com/felixbuenemann]);To;;0;[o;;[I"hSet <code>X-Accel-Redirect</code> to percent-encoded path. ({@diskkid}[https://github.com/diskkid]);To;;0;[o;;[I"eRemove unnecessary buffer growing when parsing multipart. ({@tainoe}[https://github.com/tainoe]);To;;0;[o;;[I"xExpand the root path in <code>Rack::Static</code> upon initialization. ({@rosenfeld}[https://github.com/rosenfeld]);To;;0;[o;;[I"aMake <code>ShowExceptions</code> work with binary data. ({@axyjo}[https://github.com/axyjo]);To;;0;[o;;[I"`Use buffer string when parsing multipart requests. ({@janko-m}[https://github.com/janko-m]);To;;0;[o;;[I"hSupport optional UTF-8 Byte Order Mark (BOM) in config.ru. ({@mikegee}[https://github.com/mikegee]);To;;0;[o;;[I"kHandle <code>X-Forwarded-For</code> with optional port. ({@dpritchett}[https://github.com/dpritchett]);To;;0;[o;;[I"wUse <code>Time#httpdate</code> format for Expires, as proposed by RFC 7231. ({@nanaya}[https://github.com/nanaya]);To;;0;[o;;[I"�Make <code>Utils.status_code</code> raise an error when the status symbol is invalid instead of <code>500</code>. ({@adambutler}[https://github.com/adambutler]);To;;0;[o;;[I"\Rename <code>Request::SCHEME_WHITELIST</code> to <code>Request::ALLOWED_SCHEMES</code>.;To;;0;[o;;[I"�Make <code>Multipart::Parser.get_filename</code> accept files with <code>+</code> in their name. ({@lucaskanashiro}[https://github.com/lucaskanashiro]);To;;0;[o;;[I"\Add Falcon to the default handler fallbacks. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"�Update codebase to avoid string mutations in preparation for <code>frozen_string_literals</code>. ({@pat}[https://github.com/pat]);To;;0;[o;;[I"�Change <code>MockRequest#env_for</code> to rely on the input optionally responding to <code>#size</code> instead of <code>#length</code>. ({@janko}[https://github.com/janko]);To;;0;[o;;[I"�Rename <code>Rack::File</code> -> <code>Rack::Files</code> and add deprecation notice. ({@postmodern}[https://github.com/postmodern]).;To;;0;[o;;[I"gPrefer Base64 “strict encoding” for Base64 cookies. ({@ioquatix}[https://github.com/ioquatix]);TS;	;
i;I"Removed;To;
;;;[o;;0;[o;;[I"\Remove <code>to_ary</code> from Response ({@tenderlove}[https://github.com/tenderlove]);To;;0;[o;;[I"�Deprecate <code>Rack::Session::Memcache</code> in favor of <code>Rack::Session::Dalli</code> from dalli gem ({@fatkodima}[https://github.com/fatkodima]);TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"WEliminate warnings for Ruby 2.7. ({@osamtimizer}[https://github.com/osamtimizer]]);TS;	;
i;I"Documentation;To;
;;;[
o;;0;[o;;[I"Update broken example in <code>Session::Abstract::ID</code> documentation. ({tonytonyjan}[https://github.com/tonytonyjan]);To;;0;[o;;[I"jAdd Padrino to the list of frameworks implementing Rack. ({@wikimatze}[https://github.com/wikimatze]);To;;0;[o;;[I"xRemove Mongrel from the suggested server options in the help output. ({@tricknotes}[https://github.com/tricknotes]);To;;0;[o;;[I"�Replace <code>HISTORY.md</code> and <code>NEWS.md</code> with <code>CHANGELOG.md</code>. ({@twitnithegirl}[https://github.com/twitnithegirl]);To;;0;[o;;[I"\CHANGELOG updates. ({@drenmi}[https://github.com/Drenmi], {@p8}[https://github.com/p8]);TS;	;
i;I"[2.0.8] - 2019-12-08;TS;	;
i;I"
Security;To;
;;;[o;;0;[o;;[I"'[{CVE-2019-16782}[https://nvd.nist.gov/vuln/detail/CVE-2019-16782]] Prevent timing attacks targeted at session ID lookup. BREAKING CHANGE: Session ID is now a SessionId instance instead of a String. ({@tenderlove}[https://github.com/tenderlove], {@rafaelfranca}[https://github.com/rafaelfranca]);TS;	;
i;I"[1.6.12] - 2019-12-08;TS;	;
i;I"
Security;To;
;;;[o;;0;[o;;[I"'[{CVE-2019-16782}[https://nvd.nist.gov/vuln/detail/CVE-2019-16782]] Prevent timing attacks targeted at session ID lookup. BREAKING CHANGE: Session ID is now a SessionId instance instead of a String. ({@tenderlove}[https://github.com/tenderlove], {@rafaelfranca}[https://github.com/rafaelfranca]);TS;	;
i;I"[2.0.7] - 2019-04-02;TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"�Remove calls to <code>#eof?</code> on Rack input in <code>Multipart::Parser</code>, as this breaks the specification. ({@matthewd}[https://github.com/matthewd]);To;;0;[o;;[I"mPreserve forwarded IP addresses for trusted proxy chains. ({@SamSaffron}[https://github.com/SamSaffron]);TS;	;
i;I"[2.0.6] - 2018-11-05;TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"�[{CVE-2018-16470}[https://nvd.nist.gov/vuln/detail/CVE-2018-16470]] Reduce buffer size of <code>Multipart::Parser</code> to avoid pathological parsing. ({@tenderlove}[https://github.com/tenderlove]);To;;0;[o;;[I"�Fix a call to a non-existing method <code>#accepts_html</code> in the <code>ShowExceptions</code> middleware. ({@tomelm}[https://github.com/tomelm]);To;;0;[o;;[I"�[{CVE-2018-16471}[https://nvd.nist.gov/vuln/detail/CVE-2018-16471]] Whitelist HTTP and HTTPS schemes in <code>Request#scheme</code> to prevent a possible XSS attack. ({@PatrickTulskie}[https://github.com/PatrickTulskie]);TS;	;
i;I"[2.0.5] - 2018-04-23;TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"�Record errors originating from invalid UTF8 in <code>MethodOverride</code> middleware instead of breaking. ({@mclark}[https://github.com/mclark]);TS;	;
i;I"[2.0.4] - 2018-01-31;TS;	;
i;I"Changed;To;
;;;[
o;;0;[o;;[I"{Ensure the <code>Lock</code> middleware passes the original <code>env</code> object. ({@lugray}[https://github.com/lugray]);To;;0;[o;;[I"}Improve performance of <code>Multipart::Parser</code> when uploading large files. ({@tompng}[https://github.com/tompng]);To;;0;[o;;[I"|Increase buffer size in <code>Multipart::Parser</code> for better performance. ({@jkowens}[https://github.com/jkowens]);To;;0;[o;;[I"}Reduce memory usage of <code>Multipart::Parser</code> when uploading large files. ({@tompng}[https://github.com/tompng]);To;;0;[o;;[I"uReplace ConcurrentRuby dependency with native <code>Queue</code>. ({@devmchakan}[https://github.com/devmchakan]);TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"yRequire the correct digest algorithm in the <code>ETag</code> middleware. ({@matthewd}[https://github.com/matthewd]);TS;	;
i;I"Documentation;To;
;;;[o;;0;[o;;[I"YUpdate homepage links to use SSL. ({@hugoabonizio}[https://github.com/hugoabonizio]);TS;	;
i;I"[2.0.3] - 2017-05-15;TS;	;
i;I"Changed;To;
;;;[o;;0;[o;;[I"mEnsure <code>env</code> values are ASCII 8-bit encoded. ({@eileencodes}[https://github.com/eileencodes]);TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"�Prevent exceptions when a class with mixins inherits from <code>Session::Abstract::ID</code>. ({@jnraine}[https://github.com/jnraine]);TS;	;
i;I"[2.0.2] - 2017-05-08;TS;	;
i;I"
Added;To;
;;;[o;;0;[o;;[I"�Allow <code>Session::Abstract::SessionHash#fetch</code> to accept a block with a default value. ({@yannvanhalewyn}[https://github.com/yannvanhalewyn]);To;;0;[o;;[I"~Add <code>Builder#freeze_app</code> to freeze application and all middleware. ({@jeremyevans}[https://github.com/jeremyevans]);TS;	;
i;I"Changed;To;
;;;[	o;;0;[o;;[I"dFreeze default session options to avoid accidental mutation. ({@kirs}[https://github.com/kirs]);To;;0;[o;;[I"_Detect partial hijack without hash headers. ({@devmchakan}[https://github.com/devmchakan]);To;;0;[o;;[I"^Update tests to use MiniTest 6 matchers. ({@tonytonyjan}[https://github.com/tonytonyjan]);To;;0;[o;;[I"�Allow 205 Reset Content responses to set a Content-Length, as RFC 7231 proposes setting this to 0. ({@devmchakan}[https://github.com/devmchakan]);TS;	;
i;I"
Fixed;To;
;;;[o;;0;[o;;[I"nHandle <code>NULL</code> bytes in multipart filenames. ({@casperisfine}[https://github.com/casperisfine]);To;;0;[o;;[I"]Remove warnings due to miscapitalized global. ({@ioquatix}[https://github.com/ioquatix]);To;;0;[o;;[I"{Prevent exceptions caused by a race condition on multi-threaded servers. ({@sophiedeziel}[https://github.com/sophiedeziel]);To;;0;[o;;[I"tAdd RDoc as an explicit depencency for <code>doc</code> group. ({@tonytonyjan}[https://github.com/tonytonyjan]);To;;0;[o;;[I"�Record errors originating from <code>Multipart::Parser</code> in the <code>MethodOverride</code> middleware instead of letting them bubble up. ({@carlzulauf}[https://github.com/carlzulauf]);To;;0;[o;;[I"�Remove remaining use of removed <code>Utils#bytesize</code> method from the <code>File</code> middleware. ({@brauliomartinezlm}[https://github.com/brauliomartinezlm]);TS;	;
i;I"Removed;To;
;;;[o;;0;[o;;[I"|Remove <code>deflate</code> encoding support to reduce caching overhead. ({@devmchakan}[https://github.com/devmchakan]);TS;	;
i;I"Documentation;To;
;;;[o;;0;[o;;[I"oUpdate broken example in <code>Deflater</code> documentation. ({@mwpastore}[https://github.com/mwpastore]);TS;	;
i;I"[2.0.1] - 2016-06-30;TS;	;
i;I"Changed;To;
;;;[o;;0;[o;;[I"TRemove JSON as an explicit dependency. ({@mperham}[https://github.com/mperham]);TS;	;
i;I"History/News Archive;To;;[I"[Items below this line are from the previously maintained HISTORY.md and NEWS.md files.;TS;	;
i;I"[2.0.0.rc1] 2016-05-06;To;
;;;[o;;0;[o;;[I"gRack::Session::Abstract::ID is deprecated. Please change to use Rack::Session::Abstract::Persisted;TS;	;
i;I"[2.0.0.alpha] 2015-12-04;To;
;;;[o;;0;[o;;[I"�First-party "SameSite" cookies. Browsers omit SameSite cookies from third-party requests, closing the door on many CSRF attacks.;To;;0;[o;;[I"�Pass <code>same_site: true</code> (or <code>:strict</code>) to enable: response.set_cookie 'foo', value: 'bar', same_site: true or <code>same_site: :lax</code> to use Lax enforcement: response.set_cookie 'foo', value: 'bar', same_site: :lax;To;;0;[o;;[I"Based on version 7 of the Same-site Cookies internet draft:
 https://tools.ietf.org/html/draft-west-first-party-cookies-07;To;;0;[o;;[I"`Thanks to Ben Toews (@mastahyeti) and Bob Long (@bobjflong) for updating to drafts 5 and 7.;To;;0;[o;;[I"�Add <code>Rack::Events</code> middleware for adding event based middleware: middleware that does not care about the response body, but only cares about doing work at particular points in the request / response lifecycle.;To;;0;[o;;[I"�Add <code>Rack::Request#authority</code> to calculate the authority under which the response is being made (this will be handy for h2 pushes).;To;;0;[o;;[I"�Add <code>Rack::Response::Helpers#cache_control</code> and <code>cache_control=</code>. Use this for setting cache control headers on your response objects.;To;;0;[o;;[I"|Add <code>Rack::Response::Helpers#etag</code> and <code>etag=</code>. Use this for setting etag values on the response.;To;;0;[o;;[I"
Introduce <code>Rack::Response::Helpers#add_header</code> to add a value to a multi-valued response header. Implemented in terms of other <code>Response#*_header</code> methods, so it's available to any response-like class that includes the <code>Helpers</code> module.;To;;0;[o;;[I"8Add <code>Rack::Request#add_header</code> to match.;To;;0;[o;;[I"�<code>Rack::Session::Abstract::ID</code> IS DEPRECATED. Please switch to <code>Rack::Session::Abstract::Persisted</code>. <code>Rack::Session::Abstract::Persisted</code> uses a request object rather than the <code>env</code> hash.;To;;0;[o;;[I"�Pull <code>ENV</code> access inside the request object in to a module. This will help with legacy Request objects that are ENV based but don't want to inherit from Rack::Request;To;;0;[o;;[I"`Move most methods on the <code>Rack::Request</code> to a module <code>Rack::Request::Helpers</code> and use public API to get values from the request object. This enables users to mix <code>Rack::Request::Helpers</code> in to their own objects so they can implement <code>(get|set|fetch|each)_header</code> as they see fit (for example a proxy object).;To;;0;[o;;[I"�Files and directories with + in the name are served correctly. Rather than unescaping paths like a form, we unescape with a URI parser using <code>Rack::Utils.unescape_path</code>. Fixes #265;To;;0;[o;;[I"UTempfiles are automatically closed in the case that there were too
 many posted.;To;;0;[o;;[I"�Added methods for manipulating response headers that don't assume
 they're stored as a Hash. Response-like classes may include the
 Rack::Response::Helpers module if they define these methods:;To;
;;;[o;;0;[o;;[I"Rack::Response#has_header?;To;
;;;[o;;0;[o;;[I"Rack::Response#get_header;To;;0;[o;;[I"Rack::Response#set_header;To;;0;[o;;[I"!Rack::Response#delete_header;To;;0;[o;;[I"�Introduce Util.get_byte_ranges that will parse the value of the HTTP_RANGE string passed to it without depending on the <code>env</code> hash. <code>byte_ranges</code> is deprecated in favor of this method.;To;;0;[o;;[I"�Change Session internals to use Request objects for looking up session information. This allows us to only allocate one request object when dealing with session objects (rather than doing it every time we need to manipulate cookies, etc).;To;;0;[o;;[I"iAdd <code>Rack::Request#initialize_copy</code> so that the env is duped when the request gets duped.;To;;0;[o;;[I"pAdded methods for manipulating request specific data. This includes
 data set as CGI parameters, and just any arbitrary data the user wants
 to associate with a particular request. New methods:
 - Rack::Request#has_header?
 - Rack::Request#get_header
 - Rack::Request#fetch_header
 - Rack::Request#each_header
 - Rack::Request#set_header
 - Rack::Request#delete_header;To;;0;[o;;[I"�lib/rack/utils.rb: add a method for constructing "delete" cookie
 headers. This allows us to construct cookie headers without depending
 on the side effects of mutating a hash.;To;;0;[o;;[I"GPrevent extremely deep parameters from being parsed. CVE-2015-3225;TS;	;
i;I"[1.6.1] 2015-05-06;To;
;;;[o;;0;[o;;[I":Fix CVE-2014-9490, denial of service attack in OkJson;To;;0;[o;;[I"9Use a monotonic time for Rack::Runtime, if available;To;;0;[o;;[I"{RACK_MULTIPART_LIMIT changed to RACK_MULTIPART_PART_LIMIT (RACK_MULTIPART_LIMIT is deprecated and will be removed in 1.7.0);TS;	;
i;I"[1.5.3] 2015-05-06;To;
;;;[o;;0;[o;;[I":Fix CVE-2014-9490, denial of service attack in OkJson;To;;0;[o;;[I"%Backport bug fixes to 1.5 series;TS;	;
i;I"[1.6.0] 2014-01-18;To;
;;;[o;;0;[o;;[I""Response#unauthorized? helper;To;;0;[o;;[I"WDeflater now accepts an options hash to control compression on a per-request level;To;;0;[o;;[I"-Builder#warmup method for app preloading;To;;0;[o;;[I"CRequest#accept_language method to extract HTTP_ACCEPT_LANGUAGE;To;;0;[o;;[I"2Add quiet mode of rack server, rackup --quiet;To;;0;[o;;[I")Update HTTP Status Codes to RFC 7231;To;;0;[o;;[I"=Less strict header name validation according to RFC 2616;To;;0;[o;;[I"ESPEC updated to specify headers conform to RFC7230 specification;To;;0;[o;;[I"'Etag correctly marks etags as weak;To;;0;[o;;[I"ARequest#port supports multiple x-http-forwarded-proto values;To;;0;[o;;[I"\Utils#multipart_part_limit configures the maximum number of parts a request can contain;To;;0;[o;;[I"7Default host to localhost when in development mode;To;;0;[o;;[I"2Various bugfixes and performance improvements;TS;	;
i;I"[1.5.2] 2013-02-07;To;
;;;[
o;;0;[o;;[I"CFix CVE-2013-0263, timing attack against Rack::Session::Cookie;To;;0;[o;;[I"<Fix CVE-2013-0262, symlink path traversal in Rack::File;To;;0;[o;;[I"DAdd various methods to Session for enhanced Rails compatibility;To;;0;[o;;[I":Request#trusted_proxy? now only matches whole strings;To;;0;[o;;[I"OAdd JSON cookie coder, to be default in Rack 1.6+ due to security concerns;To;;0;[o;;[I"NURLMap host matching in environments that don't set the Host header fixed;To;;0;[o;;[I"CFix a race condition that could result in overwritten pidfiles;To;;0;[o;;[I"$Various documentation additions;TS;	;
i;I"[1.4.5] 2013-02-07;To;
;;;[o;;0;[o;;[I"CFix CVE-2013-0263, timing attack against Rack::Session::Cookie;To;;0;[o;;[I"<Fix CVE-2013-0262, symlink path traversal in Rack::File;TS;	;
i;I"&[1.1.6, 1.2.8, 1.3.10] 2013-02-07;To;
;;;[o;;0;[o;;[I"CFix CVE-2013-0263, timing attack against Rack::Session::Cookie;TS;	;
i;I"[1.5.1] 2013-01-28;To;
;;;[o;;0;[o;;[I"@Rack::Lint check_hijack now conforms to other parts of SPEC;To;;0;[o;;[I"KAdded hash-like methods to Abstract::ID::SessionHash for compatibility;To;;0;[o;;[I"&Various documentation corrections;TS;	;
i;I"[1.5.0] 2013-01-21;To;
;;;[o;;0;[o;;[I"MIntroduced hijack SPEC, for before-response and after-response hijacking;To;;0;[o;;[I"-SessionHash is no longer a Hash subclass;To;;0;[o;;[I"ORack::File cache_control parameter is removed, in place of headers options;To;;0;[o;;[I"GRack::Auth::AbstractRequest#scheme now yields strings, not symbols;To;;0;[o;;[I"GRack::Utils cookie functions now format expires in RFC 2822 format;To;;0;[o;;[I"+Rack::File now has a default mime type;To;;0;[o;;[I"Orackup -b 'run Rack::Files.new(".")', option provides command line configs;To;;0;[o;;[I"7Rack::Deflater will no longer double encode bodies;To;;0;[o;;[I"FRack::Mime#match? provides convenience for Accept header matching;To;;0;[o;;[I"?Rack::Utils#q_values provides splitting for Accept headers;To;;0;[o;;[I"BRack::Utils#best_q_match provides a helper for Accept headers;To;;0;[o;;[I"JRack::Handler.pick provides convenience for finding available servers;To;;0;[o;;[I"GPuma added to the list of default servers (preferred over Webrick);To;;0;[o;;[I"BVarious middleware now correctly close body when replacing it;To;;0;[o;;[I"FRack::Request#params is no longer persistent with only GET params;To;;0;[o;;[I"ORack::Request#update_param and #delete_param provide persistent operations;To;;0;[o;;[I"IRack::Request#trusted_proxy? now returns true for local unix sockets;To;;0;[o;;[I"2Rack::Response no longer forces Content-Types;To;;0;[o;;[I"@Rack::Sendfile provides local mapping configuration options;To;;0;[o;;[I"@Rack::Utils#rfc2109 provides old netscape style time output;To;;0;[o;;[I"Updated HTTP status codes;To;;0;[o;;[I"ORuby 1.8.6 likely no longer passes tests, and is no longer fully supported;TS;	;
i;I",[1.4.4, 1.3.9, 1.2.7, 1.1.5] 2013-01-13;To;
;;;[o;;0;[o;;[I"M[SEC] Rack::Auth::AbstractRequest no longer symbolizes arbitrary strings;To;;0;[o;;[I"2Fixed erroneous test case in the 1.3.x series;TS;	;
i;I"[1.4.3] 2013-01-07;To;
;;;[o;;0;[o;;[I"DSecurity: Prevent unbounded reads in large multipart boundaries;TS;	;
i;I"[1.3.8] 2013-01-07;To;
;;;[o;;0;[o;;[I"DSecurity: Prevent unbounded reads in large multipart boundaries;TS;	;
i;I"[1.4.2] 2013-01-06;To;
;;;[!o;;0;[o;;[I"<Add warnings when users do not provide a session secret;To;;0;[o;;[I"3Fix parsing performance for unquoted filenames;To;;0;[o;;[I"Updated URI backports;To;;0;[o;;[I"EFix URI backport version matching, and silence constant warnings;To;;0;[o;;[I"0Correct parameter parsing with empty values;To;;0;[o;;[I"5Correct rackup '-I' flag, to allow multiple uses;To;;0;[o;;[I"$Correct rackup pidfile handling;To;;0;[o;;[I")Report rackup line numbers correctly;To;;0;[o;;[I"BFix request loops caused by non-stale nonces with time limits;To;;0;[o;;[I"Fix reloader on Windows;To;;0;[o;;[I"5Prevent infinite recursions from Response#to_ary;To;;0;[o;;[I"GVarious middleware better conforms to the body close specification;To;;0;[o;;[I"6Updated language for the body close specification;To;;0;[o;;[I"@Additional notes regarding ECMA escape compatibility issues;To;;0;[o;;[I"8Fix the parsing of multiple ranges in range headers;To;;0;[o;;[I"-Prevent errors from empty parameter keys;To;;0;[o;;[I"&Added PATCH verb to Rack::Request;To;;0;[o;;[I""Various documentation updates;To;;0;[o;;[I"2Fix session merge semantics (fixes rack-test);To;;0;[o;;[I"<Rack::Static :index can now handle multiple directories;To;;0;[o;;[I"EAll tests now utilize Rack::Lint (special thanks to Lars Gierth);To;;0;[o;;[I"MRack::File cache_control parameter is now deprecated, and removed by 1.5;To;;0;[o;;[I"1Correct Rack::Directory script name escaping;To;;0;[o;;[I"HRack::Static supports header rules for sophisticated configurations;To;;0;[o;;[I"@Multipart parsing now works without a Content-Length header;To;;0;[o;;[I")New logos courtesy of Zachary Scott!;To;;0;[o;;[I"JRack::BodyProxy now explicitly defines #each, useful for C extensions;To;;0;[o;;[I"@Cookies that are not URI escaped no longer cause exceptions;TS;	;
i;I"[1.3.7] 2013-01-06;To;
;;;[o;;0;[o;;[I"<Add warnings when users do not provide a session secret;To;;0;[o;;[I"3Fix parsing performance for unquoted filenames;To;;0;[o;;[I"Updated URI backports;To;;0;[o;;[I"EFix URI backport version matching, and silence constant warnings;To;;0;[o;;[I"0Correct parameter parsing with empty values;To;;0;[o;;[I"5Correct rackup '-I' flag, to allow multiple uses;To;;0;[o;;[I"$Correct rackup pidfile handling;To;;0;[o;;[I")Report rackup line numbers correctly;To;;0;[o;;[I"BFix request loops caused by non-stale nonces with time limits;To;;0;[o;;[I"Fix reloader on Windows;To;;0;[o;;[I"5Prevent infinite recursions from Response#to_ary;To;;0;[o;;[I"GVarious middleware better conforms to the body close specification;To;;0;[o;;[I"6Updated language for the body close specification;To;;0;[o;;[I"@Additional notes regarding ECMA escape compatibility issues;To;;0;[o;;[I"8Fix the parsing of multiple ranges in range headers;TS;	;
i;I"[1.2.6] 2013-01-06;To;
;;;[o;;0;[o;;[I"<Add warnings when users do not provide a session secret;To;;0;[o;;[I"3Fix parsing performance for unquoted filenames;TS;	;
i;I"[1.1.4] 2013-01-06;To;
;;;[o;;0;[o;;[I"<Add warnings when users do not provide a session secret;TS;	;
i;I"[1.4.1] 2012-01-22;To;
;;;[o;;0;[o;;[I"NAlter the keyspace limit calculations to reduce issues with nested params;To;;0;[o;;[I"MAdd a workaround for multipart parsing where files contain unescaped "%";To;;0;[o;;[I"AAdded Rack::Response::Helpers#method_not_allowed? (code 405);To;;0;[o;;[I"@Rack::File now returns 404 for illegal directory traversals;To;;0;[o;;[I"BRack::File now returns 405 for illegal methods (non HEAD/GET);To;;0;[o;;[I"=Rack::Cascade now catches 405 by default, as well as 404;To;;0;[o;;[I"CCookies missing '--' no longer cause an exception to be raised;To;;0;[o;;[I"<Various style changes and documentation spelling errors;To;;0;[o;;[I"8Rack::BodyProxy always ensures to execute its block;To;;0;[o;;[I"8Additional test coverage around cookies and secrets;To;;0;[o;;[I"JRack::Session::Cookie can now be supplied either secret or old_secret;To;;0;[o;;[I"/Tests are no longer dependent on set order;To;;0;[o;;[I";Rack::Static no longer defaults to serving index files;To;;0;[o;;[I"Rack.release was fixed;TS;	;
i;I"[1.4.0] 2011-12-28;To;
;;;[o;;0;[o;;[I"HRuby 1.8.6 support has officially been dropped. Not all tests pass.;To;;0;[o;;[I"3Raise sane error messages for broken config.ru;To;;0;[o;;[I"/Allow combining run and map in a config.ru;To;;0;[o;;[I"MRack::ContentType will not set Content-Type for responses without a body;To;;0;[o;;[I"2Status code 205 does not send a response body;To;;0;[o;;[I"@Rack::Response::Helpers will not rely on instance variables;To;;0;[o;;[I"GRack::Utils.build_query no longer outputs '=' for nil query values;To;;0;[o;;[I"Various mime types added;To;;0;[o;;[I"(Rack::MockRequest now supports HEAD;To;;0;[o;;[I"KRack::Directory now supports files that contain RFC3986 reserved chars;To;;0;[o;;[I"7Rack::File now only supports GET and HEAD requests;To;;0;[o;;[I"FRack::Server#start now passes the block to Rack::Handler::<h>#run;To;;0;[o;;[I".Rack::Static now supports an index option;To;;0;[o;;[I"!Added the Teapot status code;To;;0;[o;;[I"Brackup now defaults to Thin instead of Mongrel (if installed);To;;0;[o;;[I".Support added for HTTP_X_FORWARDED_SCHEME;To;;0;[o;;[I"JNumerous bug fixes, including many fixes for new and alternate rubies;TS;	;
i;I"[1.1.3] 2011-12-28;To;
;;;[o;;0;[o;;[I"�Security fix. http://www.ocert.org/advisories/ocert-2011-003.html
Further information here: http://jruby.org/2011/12/27/jruby-1-6-5-1;TS;	;
i;I"[1.3.5] 2011-10-17;To;
;;;[o;;0;[o;;[I":Fix annoying warnings caused by the backport in 1.3.4;TS;	;
i;I"[1.3.4] 2011-10-01;To;
;;;[	o;;0;[o;;[I"NBackport security fix from 1.9.3, also fixes some roundtrip issues in URI;To;;0;[o;;[I"Small documentation update;To;;0;[o;;[I"CFix an issue where BodyProxy could cause an infinite recursion;To;;0;[o;;[I",Add some supporting files for travis-ci;TS;	;
i;I"[1.2.4] 2011-09-16;To;
;;;[o;;0;[o;;[I"HFix a bug with MRI regex engine to prevent XSS by malformed unicode;TS;	;
i;I"[1.3.3] 2011-09-16;To;
;;;[	o;;0;[o;;[I"AFix bug with broken query parameters in Rack::ShowExceptions;To;;0;[o;;[I"HRack::Request#cookies no longer swallows exceptions on broken input;To;;0;[o;;[I"DPrevents XSS attacks enabled by bug in Ruby 1.8's regexp engine;To;;0;[o;;[I"BRack::ConditionalGet handles broken If-Modified-Since helpers;TS;	;
i;I"[1.3.2] 2011-07-16;To;
;;;[o;;0;[o;;[I"?Fix for Rails and rack-test, Rack::Utils#escape calls to_s;TS;	;
i;I"[1.3.1] 2011-07-13;To;
;;;[
o;;0;[o;;[I"Fix 1.9.1 support;To;;0;[o;;[I"Fix JRuby support;To;;0;[o;;[I"1Properly handle $KCODE in Rack::Utils.escape;To;;0;[o;;[I"�Make method_missing/respond_to behavior consistent for Rack::Lock,
Rack::Auth::Digest::Request and Rack::Multipart::UploadedFile;To;;0;[o;;[I"8Reenable passing rack.session to session middleware;To;;0;[o;;[I"=Rack::CommonLogger handles streaming responses correctly;To;;0;[o;;[I"6Rack::MockResponse calls close on the body object;To;;0;[o;;[I".Fix a DOS vector from MRI stdlib backport;TS;	;
i;I"[1.2.3] 2011-05-22;To;
;;;[o;;0;[o;;[I"*Pulled in relevant bug fixes from 1.3;To;;0;[o;;[I"Fixed 1.8.6 support;TS;	;
i;I"[1.3.0] 2011-05-22;To;
;;;[o;;0;[o;;[I"&Various performance optimizations;To;;0;[o;;[I"Various multipart fixes;To;;0;[o;;[I" Various multipart refactors;To;;0;[o;;[I"$Infinite loop fix for multipart;To;;0;[o;;[I"+Test coverage for Rack::Server returns;To;;0;[o;;[I"AAllow files with '..', but not path components that are '..';To;;0;[o;;[I"@rackup accepts handler-specific options on the command line;To;;0;[o;;[I"IRequest#params no longer merges POST into GET (but returns the same);To;;0;[o;;[I"NUse URI.encode_www_form_component instead. Use core methods for escaping.;To;;0;[o;;[I"1Allow multi-line comments in the config file;To;;0;[o;;[I"FBug L#94 reported by Nikolai Lugovoi, query parameter unescaping.;To;;0;[o;;[I"?Rack::Response now deletes Content-Length when appropriate;To;;0;[o;;[I"*Rack::Deflater now supports streaming;To;;0;[o;;[I"1Improved Rack::Handler loading and searching;To;;0;[o;;[I"Support for the PATCH verb;To;;0;[o;;[I"=env['rack.session.options'] now contains session options;To;;0;[o;;[I"Cookies respect renew;To;;0;[o;;[I"-Session middleware uses SecureRandom.hex;TS;	;
i;I"[1.2.2, 1.1.2] 2011-03-13;To;
;;;[o;;0;[o;;[I"xSecurity fix in Rack::Auth::Digest::MD5: when authenticator
returned nil, permission was granted on empty password.;TS;	;
i;I"[1.2.1] 2010-06-15;To;
;;;[o;;0;[o;;[I" Make CGI handler rewindable;To;;0;[o;;[I"PRename spec/ to test/ to not conflict with SPEC on lesser
operating systems;TS;	;
i;I"[1.2.0] 2010-06-13;To;
;;;[o;;0;[o;;[I"=Removed Camping adapter: Camping 2.0 supports Rack as-is;To;;0;[o;;[I"%Removed parsing of quoted values;To;;0;[o;;[I",Add Request.trace? and Request.options?;To;;0;[o;;[I"%Add mime-type for .webm and .htc;To;;0;[o;;[I"Fix HTTP_X_FORWARDED_FOR;To;;0;[o;;[I"Various multipart fixes;To;;0;[o;;[I"Switch test suite to bacon;TS;	;
i;I"[1.1.0] 2010-01-03;To;
;;;[!o;;0;[o;;[I"(Moved Auth::OpenID to rack-contrib.;To;;0;[o;;[I"USPEC change that relaxes Lint slightly to allow subclasses of the
required types;To;;0;[o;;[I"ESPEC change to document rack.input binary mode in greator detail;To;;0;[o;;[I"3SPEC define optional rack.logger specification;To;;0;[o;;[I"*File servers support X-Cascade header;To;;0;[o;;[I"Imported Config middleware;To;;0;[o;;[I"Imported ETag middleware;To;;0;[o;;[I" Imported Runtime middleware;To;;0;[o;;[I"!Imported Sendfile middleware;To;;0;[o;;[I"*New Logger and NullLogger middlewares;To;;0;[o;;[I",Added mime type for .ogv and .manifest.;To;;0;[o;;[I"$Don't squeeze PATH_INFO slashes;To;;0;[o;;[I"6Use Content-Type to determine POST params parsing;To;;0;[o;;[I"/Update Rack::Utils::HTTP_STATUS_CODES hash;To;;0;[o;;[I"#Add status code lookup utility;To;;0;[o;;[I"-Response should call #to_i on the status;To;;0;[o;;[I"Add Request#user_agent;To;;0;[o;;[I",Request#host knows about forwarded host;To;;0;[o;;[I"ZReturn an empty string for Request#host if HTTP_HOST and
SERVER_NAME are both missing;To;;0;[o;;[I",Allow MockRequest to accept hash params;To;;0;[o;;[I" Optimizations to HeaderHash;To;;0;[o;;[I"(Refactored rackup into Rack::Server;To;;0;[o;;[I"JAdded Utils.build_nested_query to complement Utils.parse_nested_query;To;;0;[o;;[I"ZAdded Utils::Multipart.build_multipart to complement
Utils::Multipart.parse_multipart;To;;0;[o;;[I"\Extracted set and delete cookie helpers into Utils so they can be
used outside Response;To;;0;[o;;[I"_Extract parse_query and parse_multipart in Request so subclasses
can change their behavior;To;;0;[o;;[I"/Enforce binary encoding in RewindableInput;To;;0;[o;;[I"NSet correct external_encoding for handlers that don't use RewindableInput;TS;	;
i;I"[1.0.1] 2009-10-18;To;
;;;[o;;0;[o;;[I"%Bump remainder of rack.versions.;To;;0;[o;;[I"/Support the pure Ruby FCGI implementation.;To;;0;[o;;[I"LFix for form names containing "=": split first then unescape components;To;;0;[o;;[I"KFixes the handling of the filename parameter with semicolons in names.;To;;0;[o;;[I"JAdd anchor to nested params parsing regexp to prevent stack overflows;To;;0;[o;;[I"8Use more compatible gzip write api instead of "<<".;To;;0;[o;;[I"DMake sure that Reloader doesn't break when executed via ruby -e;To;;0;[o;;[I"0Make sure WEBrick respects the :Host option;To;;0;[o;;[I"Many Ruby 1.9 fixes.;TS;	;
i;I"[1.0.0] 2009-04-25;To;
;;;[o;;0;[o;;[I"9SPEC change: Rack::VERSION has been pushed to [1,0].;To;;0;[o;;[I"CSPEC change: header values must be Strings now, split on "\n".;To;;0;[o;;[I"`SPEC change: Content-Length can be missing, in this case chunked transfer
encoding is used.;To;;0;[o;;[I"SPEC change: rack.input must be rewindable and support reading into
a buffer, wrap with Rack::RewindableInput if it isn't.;To;;0;[o;;[I"0SPEC change: rack.session is now specified.;To;;0;[o;;[I"_SPEC change: Bodies can now additionally respond to #to_path with
a filename to be served.;To;;0;[o;;[I"ZNOTE: String bodies break in 1.9, use an Array consisting of a
single String instead.;To;;0;[o;;[I"New middleware Rack::Lock.;To;;0;[o;;[I"&New middleware Rack::ContentType.;To;;0;[o;;[I"'Rack::Reloader has been rewritten.;To;;0;[o;;[I"(Major update to Rack::Auth::OpenID.;To;;0;[o;;[I"<Support for nested parameter parsing in Rack::Response.;To;;0;[o;;[I"-Support for redirects in Rack::Response.;To;;0;[o;;[I"/HttpOnly cookie support in Rack::Response.;To;;0;[o;;[I"%The Rakefile has been rewritten.;To;;0;[o;;[I"*Many bugfixes and small improvements.;TS;	;
i;I"[0.9.1] 2009-01-09;To;
;;;[o;;0;[o;;[I"HFix directory traversal exploits in Rack::File and Rack::Directory.;TS;	;
i;I"[0.9] 2009-01-06;To;
;;;[o;;0;[o;;[I"/Rack is now managed by the Rack Core Team.;To;;0;[o;;[I"CRack::Lint is stricter and follows the HTTP RFCs more closely.;To;;0;[o;;[I"%Added ConditionalGet middleware.;To;;0;[o;;[I"$Added ContentLength middleware.;To;;0;[o;;[I"Added Deflater middleware.;To;;0;[o;;[I"Added Head middleware.;To;;0;[o;;[I"%Added MethodOverride middleware.;To;;0;[o;;[I"DRack::Mime now provides popular MIME-types and their extension.;To;;0;[o;;[I" Mongrel Header now streams.;To;;0;[o;;[I"Added Thin handler.;To;;0;[o;;[I".Official support for swiftiplied Mongrel.;To;;0;[o;;[I"Secure cookies.;To;;0;[o;;[I"%Made HeaderHash case-preserving.;To;;0;[o;;[I"*Many bugfixes and small improvements.;TS;	;
i;I"[0.4] 2008-08-21;To;
;;;[o;;0;[o;;[I"<New middleware, Rack::Deflater, by Christoffer Sawicki.;To;;0;[o;;[I"3OpenID authentication now needs ruby-openid 2.;To;;0;[o;;[I"%New Memcache sessions, by blink.;To;;0;[o;;[I"MExplicit EventedMongrel handler, by Joshua Peek mailto:josh@joshpeek.com;To;;0;[o;;[I"=Rack::Reloader is not loaded in rackup development mode.;To;;0;[o;;[I""rackup can daemonize with -D.;To;;0;[o;;[I"^Many bugfixes, especially for pool sessions, URLMap, thread safety
and tempfile handling.;To;;0;[o;;[I"Improved tests.;To;;0;[o;;[I"Rack moved to Git.;TS;	;
i;I"[0.3] 2008-02-26;To;
;;;[o;;0;[o;;[I")LiteSpeed handler, by Adrian Madrid.;To;;0;[o;;[I"#SCGI handler, by Jeremy Evans.;To;;0;[o;;[I"Pool sessions, by blink.;To;;0;[o;;[I"%OpenID authentication, by blink.;To;;0;[o;;[I"C:Port and :File options for opening FastCGI sockets, by blink.;To;;0;[o;;[I"8Last-Modified HTTP header for Rack::File, by blink.;To;;0;[o;;[I"]Rack::Builder#use now accepts blocks, by Corey Jewett.
(See example/protectedlobster.ru);To;;0;[o;;[I"?HTTP status 201 can contain a Content-Type and a body now.;To;;0;[o;;[I":Many bugfixes, especially related to Cookie handling.;TS;	;
i;I"[0.2] 2007-05-16;To;
;;;[
o;;0;[o;;[I"HTTP Basic authentication.;To;;0;[o;;[I"Cookie Sessions.;To;;0;[o;;[I"Static file handler.;To;;0;[o;;[I"Improved Rack::Request.;To;;0;[o;;[I"Improved Rack::Response.;To;;0;[o;;[I"?Added Rack::ShowStatus, for better default error messages.;To;;0;[o;;[I"&Bug fixes in the Camping adapter.;To;;0;[o;;[I"*Removed Rails adapter, was too alpha.;TS;	;
i;I"[0.1] 2007-03-03;T:
@file@:0@omit_headings_from_table_of_contents_below0
Zerion Mini Shell 1.0