Releases: rack/rack-contrib
Releases · rack/rack-contrib
WE'RE BACK!
This is the first of the new monthly feature releases that will be the new
tempo of rack-contrib development. This release contains a significant
backlog of changes that have been building up over the last year or so.
Thanks to everyone who contributed changes, bug reports, and comments
towards this release.
Security
- CVE-2013-0269: Set
:create_additions => falsewhen parsing JSON.
Features
Rack::ForceValidEncoding: ensures that the URL is in a valid encoding,
raises a 400 if not.Rack::MailExceptions: can now usesendmailto send e-mails, rather
than being restricted to SMTP.Rack::MailExceptions: Credentials inAuthorization: Basicheaders are
stripped, to prevent leakage.
Bugfixes
Rack::TryStatic: Pass-through requests for non-GET/HEAD requests (#85)Rack::Locale: Don't overwrite app-set value ofContent-Language(#99)Rack::RelativeRedirect: Rewrite redirect on 307/308 status, too (#5)Rack::JSONP: Don't act when status is a no-body code (#100)Rack::StaticCache: Don't nuke response headers which enable conditional
responses. (#84)
Internal changes
READMEis now markdown.- Test suite now uses minitest.
- There is now a travis CI setup,
which tests across a range of supported Ruby versions and gemsets. Rakefilehas been tidied up to bring it up to modern standards.- The gemspec now uses pessimistic version constraints wherever possible.
- We've documented our expectations for contributors in a
CONTRIBUTINGfile.