Dancer
view release on metacpan or search on metacpan
- Add environment var hint to cookbook (PR 1161, castaway)
[ENHANCEMENTS]
- Make it possible to switch out YAML for YAML::XS for config parsing and
serialisation (there was already an attempt at this in place, and it was
documented as posisble, but didn't work) (PR 1164, 1nickt)
- New test method response_redirect_like (PR 1159, 1nickt)
- New config option raw_request_body_in_ram, which controls whether the
raw request body is available via request->body or not. See Issue #1140
for the problems the previous approach, of getting it from the temp file
that HTTP::Body might (or might not) have written it to.
- Validate session IDs read from client - GH #1172 - potential security
risk if the session provider in use passes the session ID in a way
where injection is possible.
1.3301 2016-02-16
[BUG FIXES]
- Reverted session ID validation (PR-1155) as it breaks
Dancer::Session::Cookie (bigpresh)
1.3300 2016-02-15
[BUG FIXES]
- More temp directory handling fixes (Issue #1147)
- Avoid request body truncation in hand-assembled requests in tests (PR
1148, skington)
- Avoid tests failing when "localhost" doesn't resolve (PR 1142, gbarco)
- Avoid test failures due to race condition in selecting a port to listen
on by using 127.0.0.10 instead (more of a hacky workaround than a fix,
but should help (bigpresh)
- Fix YAML session handler under taint mode (chrisjrob)
- Make request->body work again for URL-encoded POST requests - Issue 1140
reported by miyagawa (bigpresh)
- Validate session IDs read from cookies before passing to session engine,
to protect against any engine that might feed that value straight to a
file path for security - Issue 1118 (bigpresh)
[DOCUMENTATION]
- Better doc for forward_for_address (PR 1146, Relequestual)
[ENHANCEMENTS]
- Let Dancer::Test::dancer_response() handle supplying multiple params
with the same name - Issue 1116 (bigpresh)
1.3202 2015-11-07
- Re-releasing 1.3200 again now CPAN perms should be fully sorted.
1.3201 2015-11-07
- Re-releasing 1.3200 now I should have the required permissions. (Can't
re-upload as 1.3200 even though it wasn't indexed due to PAUSE
restrictions)
1.3200 2015-11-06
[BUG FIXES]
- Fix temporary directory handling in serialiser tests (PR 1133, nanis)
[ENHANCEMENTS]
- Promoting 1.3144 to stable. Only one odd, rare failure
remains on CPAN Testers, which I cannot reproduce.
- Bind to 127.0.0.1 in tests to avoid occasional spurious failures on busy
build hosts (PR 1136, thanks to @redbaron)
- More efficient handling of large requests - don't store the raw request
body, but fish it out of the HTTP::Body object's temp file if required
(PR 1134, David Precious (bigpresh))
[NEW FEATURES]
- Allow mixd named params and splats in route definitions (PR 1086,
veryrusty)
1.3144 2015-11-04
[ENHANCEMENTS]
- Bind to 127.0.0.1 in tests to avoid occasional spurious failures on busy
build hosts (PR 1136, thanks to @redbaron)
1.3143 2015-10-26
- Note: new release manager for Dancer1: David Precious (BIGPRESH)
[BUG FIXES]
- Fix temporary directory handling in serialiser tests (PR 1133, nanis)
[ENHANCEMENTS]
- More efficient handling of large requests - don't store the raw request
body, but fish it out of the HTTP::Body object's temp file if required
(PR 1134, David Precious (bigpresh))
[NEW FEATURES]
- Allow mixd named params and splats in route definitions (PR 1086,
veryrusty)
1.3142 2015-09-14
- Promotion to stable release.
[STATISTICS]
- code churn: 1 file changed, 15 insertions(+), 8 deletions(-)
1.3141 2015-09-07
[BUG FIXES]
- Dancer::Logger::Abstract now always try to convert to the configured
charset. (GH#1125, ironcamel)
- Fix test that was failing on Windows because of platform-specific
directory separators. (GH#1122, nanis)
[STATISTICS]
- code churn: 11 files changed, 52 insertions(+), 37 deletions(-)
1.3140 2015-07-03
- Promote 1.3139 to non-trial release.
[STATISTICS]
- code churn: 1 file changed, 17 insertions(+), 9 deletions(-)
1.3139 2015-06-25
[BUG FIXES]
- Reverted caching of session, as it can cause problem when the user is
using 'session->destroy' (GH#1120).
- Reverted loading config from hash. (GH#1121)
[STATISTICS]
- code churn: 9 files changed, 55 insertions(+), 249 deletions(-)
1.3138 2015-06-12
- Promote 1.3137 to non-trial release.
[STATISTICS]
- code churn: 1 file changed, 1796 insertions(+), 1754 deletions(-)
1.3137 2015-06-05
[BUG FIXES]
- Dancer::Logger->init invocation was using `setting()` instead of
`settings()`. (GH#1103, jwittkoski)
- Skip utf8 tests on cygwin. (GH#1046, mokko)
- Dancer::Session::YAML now refuse cookies that aren't alphanumerical.
( run in 0.732 second using v1.01-cache-2.11-cpan-39bf76dae61 )