pkgsrc changes:
- Use correct module type for perl install routine
Upstream changes:
0.42 Thu Feb 18 10:13:11 PST 2010
* Inline uri_unescape to drop URI::Escape which is the only non-core
dependency of this distribution. -- miyagawa
* Do not special case COOKIE and sets Cookie header to HTTP_COOKIE. -- miyagawa
O'Reilly's WebSite server misuses COOKIE environment instead of
HTTP_COOKIE. We don't need to replicate that bug since
HTTP::Server::Simple is a server, not a CGI library like CGI.pm.
0.41_01 Tue Feb 2 12:08:15 PST 2010
* Pluggable CGI class support based on a patch from NANIS
pkgsrc changes:
- Note that it uses C language
Upstream changes:
Version 0.69 -- 15 Feb 2010 <mst@shadowcat.co.uk> Matt S Trout
o No changes since the previous development release.
Version 0.68_02 -- 13 Jan 2010 <mst@shadowcat.co.uk> Matt S Trout
o Make the PRINT method return a boolean value rather than the
number of bytes written, previous patch was incorrect.
Version 0.68_01 -- 10 Jan 2010 <mst@shadowcat.co.uk> Matt S Trout
o Force signal handler installation so that we correctly install handlers
for SIGPIPE. Fixes RT#5100 <bobtfish@bobtfish.net>
o Make the PRINT method return the number of bytes written rather than
undef to be consistent with the IO:: interface. Fixes RT#24347
<David Dick>
o Fix UTF-8 double encoding when FCGI is passed octets by downgrading
them into bytes correctly. Fixes RT#52400 <chansen@cpan.org>
2.8.0 (2010-02-16)
* Updated MooTools More to version 1.2.4.3
* Updated mediabox plugin to version 1.2.0 (#1401)
* Updated SwiftMailer plugin to version 4.0.6 (#1470)
* Improved the e-mail address spam protection algorithm (#1248)
* Added insert tags article/faq/news/event_open, _url and _title (#1370)
* Added an option to assign CSS IDs/classes to teaser elements (#1392)
* Added an option to disable FancyUpload (#1423)
* Removed PCRE modifier /e for better compatibility (#1405)
* Fixed issue with empty alias drop-down menus
* Fixed issue with feed names not being mandatory (#1317)
* Fixed issue with page language not being set correctly (#1326)
* Fixed issue with collations drop-down not being MySQL 4.1 compatible (#1336)
* Fixed issue with comments module not supporting multiple forms (#1332)
* Fixed inconsistent access permissions (#1319)
* Fixed issue with system messages not being shown (#1365)
* Fixed issue with back end top links not working correctly (#1358)
* Fixed issue with basic entities not being restored in the website title
(#1359)
* Fixed issue with style sheets not being updated correctly (#1351)
* Fixed issue with DC_Table::copyChilds() not working correctly (#1360)
* Fixed issue with incorrectly encoded characters in the security question
(#1380)
* Fixed issue with german dates not being validated correctly (#1381)
* Fixed issue with "*_teaser" insert tags not supporting aliases (#1389)
* Fixed issue with front end users losing group membership (#1403)
* Fixed issue with listing module not working when alias usage is disabled
(#1408)
* Fixed issue with cached pages being sent with the wrong header (#1407)
* Fixed issue with right column articles overriding the page title (#1440)
* Fixed issue with publish icons not being set correctly (#1436)
* Fixed issue with unsearchable news/events being added to the sitemap (#1464)
* Fixed issue with striptags() not supporting POST arrays (#1429)
* Fixed issue with events being opened in a new window (#1453)
* Fixed issue with article teaser links not being limited to the website root
(#1409)
* Fixed issue with textual font-sizes not being imported (#1465)
* Fixed issue with users not being redirected to login upon Ajax requests
(#1466)
* Fixed issue with TextField widgets not supporting arrays (#1342)
* Fixed issue with newsletter reader not supporting plain text messages (#1478)
* Fixed issue with news and event insert tags creating wrong links (#1396)
* Fixed issue with TextArea default values not supporting line breaks (#1430)
* Fixed issue with thumbnails being created although no resizing is required
(#1468)
* Fixed issue with empty news/event text in the back end overview (#1489)
* Fixed issue with FancyUpload script not being compatible to extTYPOlight
(#1487)
* Fixed issue with Date class not supporting the Swedish time format (#1498)
* Fixed issue with inconsistent label_callback function calls (#1488)
* Fixed issue with newsletter reader not replacing insert tags (#1506)
* Fixed issue with home directories not being unique (#1490)
* Fixed issue with events not being shown in "shortened view" (#1473)
* Fixed issue with ModuleCustomnav generating invalid links (#1543)
* Fixed issue with subpalettes not evaluating scripts (#1522)
* Fixed issue with listing module generating invalid profile links (#1532)
* Fixed issue with sortable tables not supporting negative numbers and floats
(#1529)
* Fixed issue with listView headers not supporting time fields (#1540)
* Fixed issue with Folder::isEmpty() returning wrong results (#1555)
* Fixed issue with users not being able to create new pages in a root page
(#1554)
* Fixed issue with BBCode parser stripping tags and code snippets (#1543)
* Fixed issue with style sheet importer not handling textual font colors (#1553)
* Fixed some minor issues
templates and target for the configuration and included both the in PLIST.
Use this chance and properly move the templates into a separate location
as the config directory needs special permissions. Bump revision.
by Wen Heping.
Changelog:
QA release:
- Fix bug #2676: Setting selected value doesn't work [cweiske]
- Implement request #1749: add support for <optgroup> elements
for multi-level arrays [cweiske]
- Automatically set the <select> element id attribute
- Add some examples
- Convert to package.xml v2
- Fix coding standards
- Stabilize after 6 years in beta
Version 7.20.0 (9 February 2010)
Daniel Stenberg (9 Feb 2010)
- When downloading compressed content over HTTP and the app asked libcurl to
automatically uncompress it with the CURLOPT_ENCODING option, libcurl could
wrongly provide the callback with more data than the maximum documented
amount. An application could thus get tricked into badness if the maximum
limit was trusted to be enforced by libcurl itself (as it is documented).
This is further detailed and explained in the libcurl security advisory
20100209 at
http://curl.haxx.se/docs/adv_20100209.html
Daniel Fandrich (3 Feb 2010)
- Changed the Watcom makefiles to make them easier to keep in sync with
Makefile.inc since that can't be included directly.
Yang Tse (2 Feb 2010)
- Symbol CURL_FORMAT_OFF_T now obsoleted, will be removed in a future release,
symbol will not be available when building with CURL_NO_OLDIES defined. Use
of CURL_FORMAT_CURL_OFF_T is preferred since 7.19.0
Daniel Stenberg (1 Feb 2010)
- Using the multi_socket API, it turns out at times it seemed to "forget"
connections (which caused a hang). It turned out to be an existing (7.19.7)
bug in libcurl (that's been around for a long time) and it happened like
this:
The app calls curl_multi_add_handle() to add a new easy handle, libcurl will
then set it to timeout in 1 millisecond so libcurl will tell the app about
it.
The app's timeout fires off that there's a timeout, the app calls libcurl as
we so often document it:
do {
res = curl_multi_socket_action(... TIMEOUT ...);
} while(CURLM_CALL_MULTI_PERFORM == res);
And this is the problem number one:
When curl_multi_socket_action() is called with no specific handle, but only
a timeout-action, it will *only* perform actions within libcurl that are
marked to run at this time. In this case, the request would go from INIT to
CONNECT and return CURLM_CALL_MULTI_PERFORM. When the app then calls libcurl
again, there's no timer set for this handle so it remains in the CONNECT
state. The CONNECT state is a transitional state in libcurl so it reports no
sockets there, and thus libcurl never tells the app anything more about that
easy handle/connection.
libcurl _does_ set a 1ms timeout for the handle at the end of
multi_runsingle() if it returns CURLM_CALL_MULTI_PERFORM, but since the loop
is instant the new job is not ready to run at that point (and there's no
code that makes libcurl call the app to update the timout for this new
timeout). It will simply rely on that some other timeout will trigger later
on or that something else will update the timeout callback. This makes the
bug fairly hard to repeat.
The fix made to adress this issue:
We introduce a loop in lib/multi.c around all calls to multi_runsingle() and
simply check for CURLM_CALL_MULTI_PERFORM internally. This has the added
benefit that this goes in line with my long-term wishes to get rid of the
CURLM_CALL_MULTI_PERFORM all together from the public API.
The downside of this fix, is that the counter we return in 'running_handles'
in several of our public functions then gets a slightly new and possibly
confusing behavior during times:
If an app adds a handle that fails to connect (very quickly) it may just
as well never appear as a 'running_handle' with this fix. Previously it
would first bump the counter only to get it decreased again at next call.
Even I have used that change in handle counter to signal "end of a
transfer". The only *good* way to find the end of a individual transfer
is calling curl_multi_info_read() to see if it returns one.
Of course, if the app previously did the looping before it checked the
counter, it really shouldn't be any new effect.
Yang Tse (26 Jan 2010)
- Constantine Sapuntzakis' and Joshua Kwan's work done in the last four months
relative to the asynchronous DNS lookups, along with with some integration
adjustments I have done are finally committed to CVS.
Currently these enhancements will benefit builds done using c-ares on any
platform as well as Windows builds using the default threaded resolver.
This release does not make generally available POSIX threaded DNS lookups
yet. There is no configure option to enable this feature yet. It is possible
to experimantally try this feature running configure with compiler flags that
make simultaneous definition of preprocessor symbols USE_THREADS_POSIX and
HAVE_PTHREAD_H, as well as whatever reentrancy compiler flags and linker ones
are required to link and properly use pthread_* functions on each platform.
Daniel Stenberg (26 Jan 2010)
- Mike Crowe made libcurl return CURLE_COULDNT_RESOLVE_PROXY when it is the
proxy that cannot be resolved when using c-ares. This matches the behaviour
when not using c-ares.
Bj
- Added a new flag: -J/--remote-header-name. This option tells the
-O/--remote-name option to use the server-specified Content-Disposition
filename instead of extracting a filename from the URL.
Daniel Stenberg (21 Jan 2010)
- Chris Conroy brought support for RTSP transfers, and with it comes 8(!) new
libcurl options for controlling what to get and how to receive posssibly
interleaved RTP data.
Daniel Stenberg (20 Jan 2010)
- As was pointed out on the http-state mailing list, the order of cookies in a
HTTP Cookie: header _needs_ to be sorted on the path length in the cases
where two cookies using the same name are set more than once using
(overlapping) paths. Realizing this, identically named cookies must be
sorted correctly. But detecting only identically named cookies and take care
of them individually is harder than just to blindly and unconditionally sort
all cookies based on their path lengths. All major browsers also already do
this, so this makes our behavior one step closer to them in the cookie area.
Test case 8 was the only one that broke due to this change and I updated it
accordingly.
Daniel Stenberg (19 Jan 2010)
- David McCreedy brought a fix and a new test case (129) to make libcurl work
again when downloading files over FTP using ASCII and it turns out that the
final size of the file is not the same as the initial size the server
reported. This is very common since servers don't take the newline
conversions into account.
Kamil Dudka (14 Jan 2010)
- Suppressed side effect of OpenSSL configure checks, which prevented NSS from
being properly detected under certain circumstances. It had been caused by
strange behavior of pkg-config when handling PKG_CONFIG_LIBDIR. pkg-config
distinguishes among empty and non-existent environment variable in that case.
Daniel Stenberg (12 Jan 2010)
- Gil Weber reported a peculiar flaw with the multi interface when doing SFTP
transfers: curl_multi_fdset() would return -1 and not set and file
descriptors several times during a transfer of a single file. It turned out
to be due to two different flaws now fixed. Gil's excellent recipe helped me
nail this.
Daniel Stenberg (11 Jan 2010)
- Made sure that the progress callback is repeatedly called at a regular
interval even during very slow connects.
- The tests/runtests.pl script now checks to see if the test case that runs is
present in the tests/data/Makefile.am and outputs a notice message on the
screen if not. Each test file has to be included in that Makefile.am to get
included in release archives and forgetting to add files there is a common
mistake. This is an attempt to make it harder to forget.
Daniel Stenberg (9 Jan 2010)
- Johan van Selst found and fixed a OpenSSL session ref count leak:
ossl_connect_step3() increments an SSL session handle reference counter on
each call. When sessions are re-used this reference counter may be
incremented many times, but it will be decremented only once when done (by
Curl_ossl_session_free()); and the internal OpenSSL data will not be freed
if this reference count remains positive. When a session is re-used the
reference counter should be corrected by explicitly calling
SSL_SESSION_free() after each consecutive SSL_get1_session() to avoid
introducing a memory leak.
(http://curl.haxx.se/bug/view.cgi?id=2926284)
Daniel Stenberg (7 Jan 2010)
- Make sure the progress callback is called repeatedly even during very slow
name resolves when c-ares is used for resolving.
Claes Jakobsson (6 Jan 2010)
- Julien Chaffraix fixed so that the fragment part in an URL is not sent
to the server anymore.
Kamil Dudka (3 Jan 2010)
- Julien Chaffraix eliminated a duplicated initialization in singlesocket().
Daniel Stenberg (2 Jan 2010)
- Make curl support --ssl and --ssl-reqd instead of the previous FTP-specific
versions --ftp-ssl and --ftp-ssl-reqd as these options are now used to
control SSL/TLS for IMAP, POP3 and SMTP as well in addition to FTP. The old
option names are still working but the new ones are the ones listed and
documented.
Daniel Stenberg (1 Jan 2010)
- Ingmar Runge enhanced libcurl's FTP engine to support the PRET command. This
command is a special "hack" used by the drftpd server, but even though it is
a custom extension I've deemed it fine to add to libcurl since this server
seems to survive and people keep using it and want libcurl to support
it. The new libcurl option is named CURLOPT_FTP_USE_PRET, and it is also
usable from the curl tool with --ftp-pret. Using this option on a server
that doesn't support this command will make libcurl fail.
I added test cases 1107 and 1108 to verify the functionality.
The PRET command is documented at
http://www.drftpd.org/index.php/Distributed_PASV
Yang Tse (30 Dec 2009)
- Steven M. Schweda improved VMS build system, and Craig A. Berry helped
with the patch and testing.
Daniel Stenberg (26 Dec 2009)
- Renato Botelho and Peter Pentchev brought a patch that makes the libcurl
headers work correctly even on FreeBSD systems before v8.
(http://curl.haxx.se/bug/view.cgi?id=2916915)
Daniel Stenberg (17 Dec 2009)
- David Byron fixed Curl_ossl_cleanup to actually call ENGINE_cleanup when
available.
- Follow-up fix for the proxy fix I did for Jon Nelson's bug. It turned out I
was a bit too quick and broke test case 1101 with that change. The order of
some of the setups is sensitive. I now changed it slightly again to make
sure we do them in this order:
1 - parse URL and figure out what protocol is used in the URL
2 - prepend protocol:// to URL if missing
3 - parse name+password off URL, which needs to know what protocol is used
(since only some allows for name+password in the URL)
4 - figure out if a proxy should be used set by an option
5 - if no proxy option, check proxy environment variables
6 - run the protocol-specific setup function, which needs to have the proxy
already set
Daniel Stenberg (15 Dec 2009)
- Jon Nelson found a regression that turned out to be a flaw in how libcurl
detects and uses proxies based on the environment variables. If the proxy
was given as an explicit option it worked, but due to the setup order
mistake proxies would not be used fine for a few protocols when picked up
from '[protocol]_proxy'. Obviously this broke after 7.19.4. I now also added
test case 1106 that verifies this functionality.
(http://curl.haxx.se/bug/view.cgi?id=2913886)
Daniel Stenberg (12 Dec 2009)
- IMAP, POP3 and SMTP support and their TLS versions (including IMAPS, POP3S
and SMTPS) are now supported. The current state may not yet be solid, but
the foundation is in place and the test suite has some initial support for
these protocols. Work will now persue to make them nice libcurl citizens
until release.
The work with supporting these new protocols was sponsored by
networking4all.com - thanks!
Daniel Stenberg (10 Dec 2009)
- Siegfried Gyuricsko found out that the curl manual said --retry would retry
on FTP errors in the transient 5xx range. Transient FTP errors are in the
4xx range. The code itself only tried on 5xx errors that occured _at login_.
Now the retry code retries on all FTP transfer failures that ended with a
4xx response.
(http://curl.haxx.se/bug/view.cgi?id=2911279)
- Constantine Sapuntzakis figured out a case which would lead to libcurl
accessing alredy freed memory and thus crash when using HTTPS (with
OpenSSL), multi interface and the CURLOPT_DEBUGFUNCTION and a certain order
of cleaning things up. I fixed it.
(http://curl.haxx.se/bug/view.cgi?id=2905220)
Daniel Stenberg (7 Dec 2009)
- Martin Storsjo made libcurl use the Expect: 100-continue header for posts
with unknown size. Previously it was only used for posts with a known size
larger than 1024 bytes.
Daniel Stenberg (1 Dec 2009)
- If the Expect: 100-continue header has been set by the application through
curl_easy_setopt with CURLOPT_HTTPHEADER, the library should set
data->state.expect100header accordingly - the current code (in 7.19.7 at
least) doesn't handle this properly. Martin Storsjo provided the fix!
Yang Tse (28 Nov 2009)
- Added Diffie-Hellman parameters to several test harness certificate files in
PEM format. Required by several stunnel versions used by our test harness.
Daniel Stenberg (28 Nov 2009)
- Markus Koetter provided a polished and updated version of Chad Monroe's TFTP
rework patch that now integrates TFTP properly into libcurl so that it can
be used non-blocking with the multi interface and more. BLKSIZE also works.
The --tftp-blksize option was added to allow setting the TFTP BLKSIZE from
the command line.
Daniel Stenberg (26 Nov 2009)
- Extended and fixed the change I did on Dec 11 for the the progress
meter/callback during FTP command/response sequences. It turned out it was
really lame before and now the progress meter SHOULD get called at least
once per second.
Daniel Stenberg (23 Nov 2009)
- Bjorn Augustsson reported a bug which made curl not report any problems even
though it failed to write a very small download to disk (done in a single
fwrite call). It turned out to be because fwrite() returned success, but
there was insufficient error-checking for the fclose() call which tricked
curl to believe things were fine.
Yang Tse (23 Nov 2009)
- David Byron modified Makefile.dist vc8 and vc9 targets in order to allow
finer granularity control when generating src and lib makefiles.
Yang Tse (22 Nov 2009)
- I modified configure to force removal of the curlbuild.h file included in
distribution tarballs for use by non-configure systems. As intended, this
would get overwriten when doing in-tree builds. But VPATH builds would end
having two curlbuild.h files, one in the source tree and another in the
build tree. With the modification I introduced 5 Nov 2009 this could become
an issue when running libcurl's test suite.
Daniel Stenberg (20 Nov 2009)
- Constantine Sapuntzakis identified a write after close, as the sockets were
closed by libcurl before the SSL lib were shutdown and they may write to its
socket. Detected to at least happen with OpenSSL builds.
- Jad Chamcham pointed out a bug with connection re-use. If a connection had
CURLOPT_HTTPPROXYTUNNEL enabled over a proxy, a subsequent request using the
same proxy with the tunnel option disabled would still wrongly re-use that
previous connection and the outcome would only be badness.
Yang Tse (18 Nov 2009)
- I modified the memory tracking system to make it intolerant with zero sized
malloc(), calloc() and realloc() function calls.
Daniel Stenberg (17 Nov 2009)
- Constantine Sapuntzakis provided another fix for the DNS cache that could
end up with entries that wouldn't time-out:
1. Set up a first web server that redirects (307) to a http://server:port
that's down
2. Have curl connect to the first web server using curl multi
After the curl_easy_cleanup call, there will be curl dns entries hanging
around with in_use != 0.
(http://curl.haxx.se/bug/view.cgi?id=2891591)
- Marc Kleine-Budde fixed: curl saved the LDFLAGS set during configure into
its pkg-config file. So -Wl stuff ended up in the .pc file, which is really
bad, and breaks if there are multiple -Wl in our LDFLAGS (which are in
PTXdist). bug #2893592 (http://curl.haxx.se/bug/view.cgi?id=2893592)
Kamil Dudka (15 Nov 2009)
- David Byron improved the configure script to use pkg-config to find OpenSSL
(and in particular the list of required libraries) even if a path is given
as argument to --with-ssl
Yang Tse (15 Nov 2009)
- I removed enable-thread / disable-thread configure option. These were only
placebo options. The library is always built as thread safe as possible on
every system.
Claes Jakobsson (14 Nov 2009)
- curl-config now accepts '--configure' to see what arguments was
passed to the configure script when building curl.
Daniel Stenberg (14 Nov 2009)
- Claes Jakobsson restored the configure functionality to detect NSS when
--with-nss is set but not "yes".
I think we can still improve that to check for pkg-config in that path etc,
but at least this patch brings back the same functionality we had before.
- Camille Moncelier added support for the file type SSL_FILETYPE_ENGINE for
the client certificate. It also disable the key name test as some engines
can select a private key/cert automatically (When there is only one key
and/or certificate on the hardware device used by the engine)
Yang Tse (14 Nov 2009)
- Constantine Sapuntzakis provided the fix that ensures that an SSL connection
won't be reused unless protection level for peer and host verification match.
I refactored how preprocessor symbol _THREAD_SAFE definition is done.
Kamil Dudka (12 Nov 2009)
- Kevin Baughman provided a fix preventing libcurl-NSS from crash on doubly
closed NSPR descriptor. The issue was hard to find, reported several times
before and always closed unresolved. More info at the RH bug:
https://bugzilla.redhat.com/534176
- libcurl-NSS now tries to reconnect with TLS disabled in case it detects
a broken TLS server. However it does not happen if SSL version is selected
manually. The approach was originally taken from PSM. Kaspar Brand helped me
to complete the patch. Original bug reports:
https://bugzilla.redhat.com/525496https://bugzilla.redhat.com/527771
Yang Tse (12 Nov 2009)
- I modified configure script to make the getaddrinfo function check also
verify if the function is thread safe.
Yang Tse (11 Nov 2009)
- Marco Maggi reported that compilation failed when configured --with-gssapi
and GNU GSS installed due to a missing mutual exclusion of header files in
the Kerberos 5 code path. He also verified that my patch worked for him.
Daniel Stenberg (11 Nov 2009)
- Constantine Sapuntzakis posted bug #2891595
(http://curl.haxx.se/bug/view.cgi?id=2891595) which identified how an entry
in the DNS cache would linger too long if the request that added it was in
use that long. He also provided the patch that now makes libcurl capable of
still doing a request while the DNS hash entry may get timed out.
- Christian Schmitz noticed that the progress meter/callback was not properly
used during the FTP connection phase (after the actual TCP connect), while
it of course should be. I also made the speed check get called correctly so
that really slow servers will trigger that properly too.
Kamil Dudka (5 Nov 2009)
- Dropped misleading timeouts in libcurl-NSS and made sure the SSL socket works
in non-blocking mode.
Yang Tse (5 Nov 2009)
- I removed leading 'curl' path on the 'curlbuild.h' include statement in
curl.h, adjusting auto-makefiles include path, to enhance portability to
OS's without an orthogonal directory tree structure such as OS/400.
Daniel Stenberg (4 Nov 2009)
- I fixed several problems with the transfer progress meter. It showed the
wrong percentage for small files, most notable for <1000 bytes and could
easily end up showing more than 100% at the end. It also didn't show any
percentage, transfer size or estimated transfer times when transferring
less than 100 bytes.
This covers the transition to ASF that mod_fcgi was donated to in the course
of 2009. No longer backwards compatible as far as configuration is concerned!
Changes with mod_fcgid 2.3.5
*) Stop using the unsuppressable "notice" log level for debug and
informational messages. PR 48536. [Jeff Trawick]
*) Respect DEFAULT_REL_RUNTIMEDIR for default values of FcgidIPCDir and
FcgidProcessTableFile. [Jeff Trawick]
*) Resolve fatal EDEADLK errors with threaded MPMs on Solaris. [Jeff Trawick]
*) Display information about active processes in the server-status page.
[Ryan Pan]
*) Fix compatibility of httpd.conf-editing logic with non-GNU awk. PR 48067.
[Hans Werner Strube <strube physik3.gwdg.de>]
*) Fix startup errors creating shared memory in constrained systems, such
as OS X in its default configuration. This is a regression since mod_fcgid
2.2. [Jeff Trawick]
*) Recover from most "Resource temporarily unavailable" errors writing the
request to the FastCGI application. These were common with large request
bodies on Mac OS X and intermittent on Solaris. PR 48025. [Jeff Trawick]
*) Fix a bug in fixconf.sed that resulted in a prefix of "FcgidFcgid" on the
updated directives. [Dan Hulme <dhulme gmail.com>]
*) Fix possible corruption or truncation of request bodies which exceed
FcgidMaxRequestInMem. This is a regression since mod_fcgid 2.2, which
effectively ignored FcgidMaxRequestInMem if larger than 8K. PR 48021.
[Jeff Trawick]
*) Fix handling of the request body when a FastCGI access checker/
authenticator/authorizer (AAA) was configured. The body wasn't available
for the request handler. PR 47973.
[Jeff Trawick, Barry Scott <barry.scott onelan.co.uk>]
*) Fix handling of FcgidCmdOptions so that it can apply to wrapper scripts
which were defined with command-line arguments on the FcgidWrapper
directive. [Jeff Trawick]
Changes with mod_fcgid 2.3.4
*) Corrected unix 'make install' target regression in 2.3.3. [Jeff Trawick]
Changes with mod_fcgid 2.3.3
*) Add FcgidCmdOptions directive to associate some of the existing
configuration settings with a specific command. [Jeff Trawick]
*) Allow/respect virtual host settings for the following directives:
FcgidBusyTimeout, FcgidMaxProcessesPerClass, FcgidMinProcessesPerClass,
FcgidIdleTimeout, and FcgidProcessLifetime. [Jeff Trawick]
Changes with mod_fcgid 2.3.2
*) Fix a make install DESTDIR problem handling the reference manual and
potentially other files (specific to 2.3.1).
[Paul Howarth <paul city-fan.org>]
*) Fix a mod_fcgid 2.3.1 failure with <sys/mutex.h> when building for
httpd 2.0.x on some platforms. [Paul Howarth <paul city-fan.org>]
*) Termination of idle processes after inactivity timeout can now be
disabled by setting FcgidIdleTimeout to 0. Termination of idle
processes based on the process lifetime can now be disabled by setting
FcgidProcessLifeTime to 0. FcgidMaxRequestsPerProcess now accepts 0
for unlimited. [Ricardo Cantu <ricardo smartcsc.com>]
*) All directives have been renamed in order to use a common prefix "Fcgid".
Underscores in directive names have been eliminated in favor of
CamelCase. The old directive names will still work but are deprecated.
To fix your configuration you can use the sed script build/fixconf.sed.
The following tables contains old and new directive names.
Old Name New Name
...................................................................
BusyScanInterval FcgidBusyScanInterval
BusyTimeout FcgidBusyTimeout
DefaultInitEnv FcgidInitialEnv
DefaultMaxClassProcessCount FcgidMaxProcessesPerClass
DefaultMinClassProcessCount FcgidMinProcessesPerClass
ErrorScanInterval FcgidErrorScanInterval
FastCgiAccessChecker FcgidAccessChecker
FastCgiAccessCheckerAuthoritative FcgidAccessCheckerAuthoritative
FastCgiAuthenticator FcgidAuthenticator
FastCgiAuthenticatorAuthoritative FcgidAuthenticatorAuthoritative
FastCgiAuthorizer FcgidAuthorizer
FastCgiAuthorizerAuthoritative FcgidAuthorizerAuthoritative
FCGIWrapper FcgidWrapper
IdleScanInterval FcgidIdleScanInterval
IdleTimeout FcgidIdleTimeout
IPCCommTimeout FcgidIOTimeout
IPCConnectTimeout FcgidConnectTimeout
MaxProcessCount FcgidMaxProcesses
MaxRequestInMem FcgidMaxRequestInMem
MaxRequestLen FcgidMaxRequestLen
MaxRequestsPerProcess FcgidMaxRequestsPerProcess
OutputBufferSize FcgidOutputBufferSize
PassHeader FcgidPassHeader
PHP_Fix_Pathinfo_Enable FcgidFixPathinfo
ProcessLifeTime FcgidProcessLifeTime
SharememPath FcgidProcessTableFile
SocketPath FcgidIPCDir
SpawnScore FcgidSpawnScore
SpawnScoreUpLimit FcgidSpawnScoreUpLimit
TerminationScore FcgidTerminationScore
TimeScore FcgidTimeScore
ZombieScanInterval FcgidZombieScanInterval
*) Separate classes by virtual host also on Windows. [Rainer Jung]
*) Log client IP address with many more error log messages. [Jeff Trawick]
*) Fix basic implementation of FcgidMaxRequestInMem and FcgidMaxRequestLen
directives. [Jeff Trawick]
*) Merge per-directory directives so that they can be inherited or
overridden within other containers as expected. Merge server config/
virtual host directives so that they can be inherited or overridden
within a virtual host as expected. [Jeff Trawick]
*) Use the virtual host settings for the request being processed instead
of those of the first FastCGI request handled by this httpd child process.
Affected directives: FcgidBusyTimeout, FcgidIOTimeout,
FcgidConnectTimeout, FcgidMaxRequestsPerProcess, and FcgidOutputBufferSize.
[Jeff Trawick]
*) Directives which previously were ignored in a virtual host context are no
longer allowed. [Jeff Trawick]
*) Add an optional flag "virtual" to FcgidWrapper.
If virtual is set, the URLs passed to the wrapper are not
checked, whether they resolve to a file. [Rainer Jung]
*) Make the second argument (suffix) for FcgidWrapper optional.
A wrapper defined without a suffix applies to all URLs, unless
there is another more specific wrapper with a suffix. [Rainer Jung]
Changes with mod_fcgid 2.3.1
*) Suppress "need AuthType to note auth failure" error-level messages when a
FastCGIAccessChecker fails without any other kind of authentication
(Basic, Digest) configured. [Eric Covener]
*) Complete the unix port to 2.3-dev trunk. [William Rowe]
*) Provide a default, mandatory environment as with mod_cgi (with the
inclusion of LD_LIBRARY_PATH or similar variables on other platforms),
unless overridden by DefaultInitEnv. [William Rowe]
*) Handle DefaultInitEnv for case-insensitive platforms by forcing the env
variable names to uppercase on Win32, OS2 and Netware. [William Rowe]
*) Don't try to set the ownership of the socket directory unless running
as root and the directory was just created. This allows the default
httpd.conf (with some daemon User/Group) to be used by non-root.
[Jeff Trawick]
*) Fix formatting of several messages, including the oft-seen "mod_fcgid:
Can't create shared memory for size %zu byte". [Jeff Trawick]
*) Fix declared names of FastCgiAuthenticator and FastCgiAuthenticator-
Authoritative directives, allowing them to be used. [Ulf Haueisen
<ulf dvlp.de>]
*) Fix vhost-specific DefaultInitEnv settings. Previously, when setting
multiple virtual hosts with the same SuexecUserGroup user and group, the
process manager use the same process pool for both virtual hosts. This
means if one virtual host has a DefaultInitEnv and the other has
different values set, a fastcgi request from any of these virtual host
can go to the same processes, which is inconsistent (a request from
virtualhost a with DefaultInitEnv VAL "a", can go to a process spawned
with virtualhost b with DefaultInitEnv VAL "b" set). [Gabriel Barazer
<gabriel oxeva.fr>]
+- Added keybindings for scrolling.
- Help button and local help file.
+- Add support for multiple class names in CSS.
- Fix X11 coordinate overflows with huge borders.
- Improve CSS font parsing.
- Enable font face setting via <font> element.
- Ignore XML comment markers in CSS.
- Split up long lines in plain.cc to avoid X11 coordinate overflows.
- Fix user agent style for nested <ul>.
- Add support for CSS property list-style-position.
- Support border-width: thin | medium | thick.
- Fix CSS_SHORTHAND_DIRECTIONS case in CssParser.
- Add quirk to reset font properties in tables (fixes e.g. gmail).
+- Cleaned up system includes in dpid directory.
- Fixed CustProgressBox() for systems without weak symbols.
- Handle signed chars. Added dIsspace() and dIsalnum() to dlib.
- Added a_Dpip_get_attr_l() to DPIP's API.
- Changed the CCCs to build in one step (for both HTTP and DPI). This
is simpler and helps to avoid race conditions.
- Updated CCCwork.txt to the new scheme.
- Fixed a bug with OPTION element (it was parsing entities twice).
- Bugfix: remove the empty cache entry lingering after connection abort.
- Switched capi to use dlib's Dlist instead of a_List_* methods.
- Remove empty cache entries on Stop-button press and new link request!
- Fixed URL unescaping in the datauri DPI.
- Changed and reimplemented the DPI API.
* Fixed bugs and updated all DPI programs:
* Reimplemented the file dpi using select(). No pthreads-based anymore.
* Fixed ftp dpi: downloads, streamed transfer, error feedback.
* Fixed a bug in dillo with lingering cache entries.
* Made dpidc a C language program.
* Made the internal dsh implementation use unique functions for read/write.
* Removed the write/fwrite mix in DPIP.
* Made the DPIP API token-based. Packet assembling is coded inside DPIP!
* Several cleanups and more error handling sprinkled all over too.
+- Fix segfault from AREA when MAP is missing name attribute.
- Fix image map coordinates when margin/border/padding present.
- Handle stylesheet @charset.
- Fix cache segfault when cache entry removed.
- Split words that contain whitespace as numeric character references.
- Allow linebreaks around Chinese/Japanese characters.
- Fix segfault in Html_parse_doctype (BUG#918).
- Change exit code used for bad command line argument.
- By default, do not use proxy for localhost (BUG 921).
- Fix scrolling for text search.
- Added 'save' key action (not bound by default).
- Tooltips
- Fix segfault when radio button lacks name attribute.
- Enable popup menu below bottom of page content (BUG#856).
- Handle JPEGs with CMYK color space.
- Allow keysyms in keysrc.
- Explicitly check installation bindir for dpid (BUG 930)
- General cookies overhaul.
+- Support for the letter-spacing property.
+- Fixed a bug in w3c_mode. In fact it wasn't working at all.
- Improve stylesheet menu.
+- Limit number of simultaneous connections (BUG 685).
* template: Preprocess parameters before htmlizing.
* img: Fix a bug that could taint @links with undef values.
* setup automator: Configure Term::Readline to use bold for prompt, rather
than default underline. Closes: #517656
* Allow jumping directly into account registration process by going to
ikiwiki.cgi?do=register
* Improve display of openid in preferences page.
* Add link to userpage (or creation link) to top of preferences page.
* opendiscussion: This plugin will also now allow posting comments
to otherwise locked-down sites.
* auto-blog.setup: Lock all pages, so only admin can post to the blog
by default, and enable opendiscussion so others can comment.
* Fix color and format plugins to appear in the websetup interface.
* amazon_s3: Fix to support the EU S3 datacenter, which is more picky
about attempts to create already existing buckets.
* httpauth: When cgiauthurl is configured, httpauth can now be used
alongside other authentication methods (like openid or anonok). Rather
than always redirect to the cgiauthurl for authentication, there is now
a button on the login form to use it.
* httpauth: Add httpauth_pagespec setting that can be used to limit
pages to only being edited via users authed with httpauth.
* Allow globs to be used in user() pagespecs.
* Group related plugins into sections in the setup file, and drop
unused rcs plugins from the setup file.
uWSGI is a fast (pure C), self-healing, developer-friendly WSGI server,
aimed for professional python webapps deployment and development.
Backend support exists for Apache, nginx, cherokee and lighttpd.
Some of the features include:
- low memory footprint
- preforking and multithreaded operation
- logging, diagnostic and profiling support
- support for sendfile()
- self-healing
- graceful restart and hot-plug upgrading
Collection.
The Perl 5 module Web::Scraper is a web scraper toolkit, inspired
by Ruby's equivalent Scrapi. It provides a DSL-ish interface for
traversing HTML documents and returning a neatly arranged Perl data
structure.
NetBSD Packages Collection.
The Perl 5 module HTML::TreeBuilder::LibXML is a libxml based
compatible interface to HTML::TreeBuilder, which could be slow for
a large document.
* Update Polish language files, supporting really 2.8.RC2.
* Add missing language files which should be added: Bosnian, Croatian,
Finnish, Hungarian, Slovenian and Tagalog.
* Drop executable permission from translation files.
- fix various bugs, including a trivial to trigger OOM/DoS
- Allow support for checking for exec bit on cgi scripts
- Add support for TLS servername indication
- Add support client certificate verification
- Split off spawn-fcgi into a separate package
spawn-fcgi is a small utility to start external FastCGI applications.
It takes care of various common tasks to simplify deployment:
- setuid/setgid
- current working directory
- chroot
- socket creation and permissions in the case of Unix Domain Sockets
- forking a number of worker processes
- fix issues with Keep-Alive in various clients
- fix issue with internal redirects between proxy/fastcgi locations
- fix a bug with discarding request bodies
Add optional uwsgi backend.
NetBSD Packages Collection.
The Perl 5 module HTML::TreeBuilder::XPath adds typical XPath methods
to HTML::TreeBuilder, to make it easy to query a document.
Version 3.49
[BUG FIXES]
1. Fix a regression since 3.44 involving a case when the header includes "Content-Length: 0".
Thanks to Alex Vandiver (RT#51109)
2. Suppress uninitialized warnings under -w. Thanks to burak. (RT#50301)
3. url() now uses virtual_port() instead of server_port(). Thanks to MKANAT and Yanick Champoux. (RT#51562)
[SECURITY]
1. embedded newlines are now filtered out of header values in header().
Thanks to Mark Stosberg and Yanick Champoux.
[DOCUMENTATION]
1. README was updated to reflect that CGI.pm was moved under ./lib.
Thanks to Alex Vandiver.
[INTERNALS]
1. More tests were added for autoescape, thanks to Bob Kuo. (RT#25485)
2. Attempt to avoid test failures with t/fast, thanks to Steve Hay. (RT#49599)
1.4.4
Development of HTTP_Request package is halted, only bug fixing will be done.
Please submit feature requests for HTTP_Request2 package.
Fixes:
* Improved memory usage of _buildRequest() method (bug #14574)
* Clarified documentation for addFile() method to mention that it is useful
only for POST method file uploads (bug #14635)
* Do not send "Content-Length: 0" header for methods other than
POST and PUT, as some servers may return error 400 (bug #14740)
1.4.3
* Added possibility to get reason phrase from HTTP response (request #12352)
* PHP 4.2.0 should be the minimal PHP version (bug #12354), also updated other
dependencies' versions to saner values
* Send a Content-Length header in request even if body is empty (request #12900)
* Do not pass length parameter to gzinflate(), it could cause problems in some
corner cases (bugs #13135, #14370)
* Return an error if trying to do a HTTPS request without OpenSSL support
(bug #14127)
* Do not stop reading chunked response body prematurely (bug #14200)
1.4.2
* The final CRLF was not properly added to request headers on POST request
with no post data (Thanks to Brock Weaver)
* Added error codes (request #12335, thanks to Joe Stump for the patch)
* HTTP_Request sent broken requests on redirects with no trailing slash
(bug #12308, thanks to Joe Stump for the patch)
* Requests with a body consisting of only a symbol '0' were sent without body
(reported privately by Sam Ghods)
* download-progress.php example was broken since 1.4.0 due to addition of
'connect' and 'disconnect' events. Now works again.
1.4.1
* Removed bogus parameter for getURL() (Bug #9586, thanks to Martin Jansen)
* Improved API documentation (Bug #9984, thanks to Martin Jansen)
* Fixed wrong Content-Length if using mbstring function overloading (bug #10605)
* Fixed bogus "data CRC check failed" error on 64-bit systems (bug #10790,
thanks to Bill Moran)
* Redone the way package handles mbstring function overloading, this will allow
using gzip Content-Encoding when said overloading is switched on
* Added proper header comment blocks, improved phpdoc comments
1.4.0
* Added Keep-Alive support (request #4806), thanks to Justin Patrin for the
initial patch. Please note that "Connection: close" header is still added
by default, you need to explicitly add "Connection: Keep-Alive" header or
remove "Connection" header if using HTTP 1.1
* A new disconnect() method was added which forces disconnection from the
server if Keep-Alive is used. Also two new events are sent to the Listeners:
"connect" and "disconnect"
* Added getUrl() method (request #6589)
* Added method to properly parse header of gzip-encoded data (see RFC 1952).
This takes care of situations when the server adds some additional data
to the header (bug #8245) or sends data that is not gzip-encoded when
"Content-Encoding: gzip" header is present (bug #8213)
* "Proxy-Authorization" header is now properly set by constructor
(bug #5913)
* Fixed doc comments mentioning addBody() method instead of proper setBody()
(bug #5969)
* Fixed erroneous removal of "Content-Type" header from request
(bug #7922)
* Bogus HTTP headers are now ignored (bug #8214)
* Path is set to "/" if an URL without path (http://www.example.com)
is given (bug #8662)
* Moved to package.xml version 2.0
1.2.5
Whitespace is no longer trimmed from quoted attribute values in
_parseAttribute() method (bug #15787)
1.2.4
Migrate to package.xml version 2.0, use proper header comment block.
No code changes since previous release.
Pkgsrc changes:
- Add LICENSE
- Adjust dependencies
- Add recommended dependencies
Upstream changes:
1.13
- ignoring dirs starting with '.'
- no HTML rendering for perltoc (too slow)
- support for perlvar
- computing TOC layout, works for MSIE6, MSIE8, FF, Chrome and Safari
- many JS fixes (done in Alien-GvaScript 1.20)
- applied patch by Elliot Shank for specifiying the page title
- tested on MSIE8, FF3.5, safari4, Chrome3
1.12
- sync TOC, automatically open nodes in TOC
- support aliases in links L<alias|http://...>
- fixed bugs in URLs containing special chars like L<http://foo$/...>
- disabled automatic links within text nodes
- links to external resources will open in a blank page
- fixed bugs in displaying scripts (as opposed to modules)
- toc ignores directories starting with '.'
- toc_pragmas ignores "pod", "pods" and "inc" subdirs
Pkgsrc changes:
- Add LICENSE
Upstream changes:
1.21 18.01.2010
- bug in Builder, Gvascript.js was written to wrong location
1.20 07.01.2009
- Element.autoScroll : fix scroll amount when the scrolling block has
an offsetTop > 0
- removed PAGE_UP/DOWN handlers in TreeNavigator -- let the browser deal
with those
- treeNavigator select() has an additional param "prevent_autoscroll"
- treeNavigator autoscroll only active through kbd, not through click
- treeNavigator observes "mouseup" (instead of mousedown or click)
- autoCompleter bug fix on detach (stop observing "click")
- protoExtensions : removed RegExp.escape() (now in prototype.js)
- autoCompleter div, display above only if enough vertical space
- autoCompleter : code layout improvements
1.18 13.10.2009
- fix some minor doc glitches released in 1.17
1.17 13.10.2009
- major revision from Mona Remlawi
- new Grid component
- new CustomButtons component
- new Paginator component
- new test suite
http://www.squid-cache.org/Advisories/SQUID-2010_1.txt
Changes to squid-3.0.STABLE23 (02 Feb 2010):
- Bug 2856: removing assert() required for 3.0 patch for SQUID-2010:1
- Regression Fix: Build error in Kerberos helper after library removal.
Changes to squid-3.0.STABLE22 (01 Feb 2010):
- Regression Fix: Make Squid abort on all config parse failures.
- Bug 2787: Reduce unexpected http status to non-critical warnings.
- Bug 2496: Downloading some variants in full before relaying
- Bug 2452: Add upper limit to external_acl_type entries.
- Removed optional kerberos/spnegohelp/ library due to licensing issues
- Add client_ip_max_connections
- Handle DNS header-only packets as invalid.
- Regression Fix: Make Squid abort on all config parse failures.
- Regression Bug 2811: SNMP client/peer table OID numbering
- Bug 2851: Connection pinning fails when using a peer
- Bug 2850: Mismatch in hier_code enum / hier_strings array
- Bug 2731: Add follow_x_forwarded_for support to ICAP
- Bug 2730: Regressions in follow_x_forwarded_for since Squid-2
- Bug 2706: Set timestamps during ICAP request satisfaction.
- Bug 2553: X-Forwarded-For with IPv6 address not handled correctly
- Fix: WCCPv1 not connecting to router correctly
- Remove obsolete RunCache/RunAccel scripts.
- Add client_ip_max_connections
- Add the http::>ha format code and make http::>h log original request
headers
- ... and all bug fixes from 3.0 up to 3.0.STABLE22
- ... and many more minor build and display annoyances.
This update also contains the fix for the remote DoS vulnerability
reported in "Squid Proxy Cache Security Update Advisory SQUID-2010:1".
pkgsrc changes:
- Adding license definition
- Adjusting dependencies
Upstream changes:
0.19 19 Jan 2009
* add dep on MRO::Compat. Use it in show_related_field_using() in RDBO and DBIC Metadata subclasses.
* show_related_field_using() will now return 'unique_value' if the foreign class implements that method.
0.18 1 Dec 2009
* fix failing dbic test
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
0.6061 (11.19.2009) - John Siracusa <siracusa@gmail.com>
* Altered tests to work around strange UTF-8 errors in some installations
of perl. (Thanks to Michael Lackhoff for help debugging.)
0.606 (11.16.2009) - John Siracusa <siracusa@gmail.com>
* Overhauled inheritance to fix "Inconsistent hierarchy" mro c3 errors
(RT 51168)
* Added "use utf8" statements to ensure proper treatment of UTF-8 text
stored in the __DATA__ sections of various modules (RT 29131)
0.605 (10.16.2009) - John Siracusa <siracusa@gmail.com>
* Updated eval blocks to avoid stomping on $@ from an outer scope.
pkgsrc changes:
- Adjusting dependencies
- Adjust module type
Upstream changes:
Thu 14 Jan 20:56:00 GMT 2010 - Release 0.81
Add a JSONP serialization type.
Sat 19 Dec 14:54:00 GMT 2009 - Release 0.80
Convert all classes to Moose
Change Catalyst::Request::REST to be a mostly empty class, with
all the functionality in Catalyst::TraitFor::Request::REST
Simplify _get_allowed_methods method (aristotle)
Rework serializer return so that serializers throw an exception in
the case of issues serializing the data (hobbs).
Fri 11 Dec 01:08:00 GMT 2009 - Release 0.79
Cope with invalid (missing required q parameter) header like:
application/json; charset="utf-8"
Fix documentation to not mention deprecated things and generally be
in better style.
Make author information consistant and only in one module.
New features/improvements:
* Fix security in awredir.pl script by adding a security key required by
default.
* Enhance security of parameter sanitizing function.
* Add name of config file used to build data files inside data files header.
* Added details of version for Chrome, Opera, Safari and Konqueror browsers.
* Add AdobeAir detection.
* Major update of browsers, robots and search_engines databases (among them,
the Bing search engine).
* Increase seriously bot detection.
* Add Brezhoneg language.
* Add a better way to detect Safari versions.
* Added subpages for geoip maxmind modules in awstats_buildstaticpages.
Fixes:
* Fix typo in polish language file
* awstats emmits ton of warnings with new geoipfree - ID: 2794728
* Fix: can detect robots with robots.txt url even if file is not root.
* Other minor fixes.
pkgsrc changes:
* Patch XML encoding problem when the AT&T searchbot is encountered.
Upstream changes:
5.80019 2010-01-29 01:04:09
Bug fixed:
- Calls to $c->uri_for with private paths as strings (e.g.
$c->uri_for('controller/action', 'arg1', 'arg2') ) no longer have
/ encoded to %2F. This is due to $c->uri_for('static', 'css/foo', $bar)
which should not be encoded.
Calls with an action object (rather than a string), or uri_for action
will still encode / in args and captures to %2F
- The above noted / => %2F encoding in uri_for_action or uri_for with
an action object has been fixed to not just encode the first slash in
any set of args/captures.
- nginx and lighttpd FCGI requests with URI encoded sections as the first
path part have been fixed to operate correctly.
- A source of bogus warnings in Catalyst::Component::BUILDARGS has been
removed.
Documentation:
- Improve the documentation about -Home and how Catalyst finds the home path
for applications.
- Various minor typo fixes.
New features:
- Allow passing additional arguments to action constructors.
Exact dependencies make upgrading through binary packages impossible
because we don't have a way to do multipackage transactional updates.
You still need to have the same mozilla platform version of xulrunner
and firefox installed or there will be an error message at run time.
an indirect dependency of update for editors/p5-Padre-Plugin-Catalyst.
This plugin uses Authen::Htpasswd to let Catalyst applications use
<.htpasswd> files for it's authentication storage.
* A number of bugs in KIO have been squashed, making updating of shown
directories work again and solving some other stability issues
* A crash when creating an avatar from the webcam in Kopete has been fixed
* kded taking 100% CPU time in certain situations has been cured
This module enables use of HTTP Proxy authentication with
Catalyst::Plugin::Authentication.
Currently this module only supports the Basic scheme, but
upon request Digest will also be added.
indirect dependency of upcoming 0.08 version of editors/p5-Padre-Plugin-Catalyst
This module provides the feature of HTTP authentication for
Catalyst::Plugin::Authentication. Both basic and digest authentication
are currently supported.
When authentication is required, this module sets a status of 401, and
the body of the response to 'Authorization required.'. To override this
and set some own content, check for the $c->res->status == 401 in the
end action, and change the body accordingly.
editors/p5-Padre-Plugin-Catalyst-0.08
Catalyst::Manual::Tutorial installs a "MyApp" tutorial example and
everything it needs. The tutorial covers a wide range of Catalyst
features.
scheduled update of editors/p5-Padre-Plugin-Catalyst.
HTML::FormFu is a HTML form framework which aims to be as easy as possible
to use for basic web forms, but with the power and flexibility to do
anything else you might want to do (as long as it involves forms).
Almost any part of formfu's behaviour and output can be configured. By
default formfu renders "XHTML 1.0 Strict" compliant markup, with as
little extra markup as possible, but with sufficient CSS class names to
allow for a wide-range of output styles to be generated by changing only
the CSS.
Changes (from http://www.fengoffice.com/web/blogen/?p=125).
Improvements in 1.6.2:
* Added a checkbox to apply a task's assignee to all subtasks.
* Allow changing the maximum tasks display limit in the Tasks module.
* Speeded up the quick mark as read (blue dots in listings).
* Added actions in the email view to move to and out of the Junk
folder and to mark as unread.
* Allow to set a subtask's start and due date when adding it from the
parent task's view.
* Request username when changing an expired password for increased security.
Bug fixes in 1.6.2:
* When editing a user, the user gained access to your personal workspace if
you didn't have access to his.
* When editing a user's personal workspace you can now chose from all
workspaces, not only yours.
* "Full" search engine now matches words individually instead of matching
the whole phrase.
* White screen of death when downloading files added before version 1.4.
* Week numbers for january were incorrect.
* Error 500 when importing companies.
* Some links in email didn't open in new windows.
* When creating a contact, objects linked to the contact were ignored.
* Invalid UTF8 characters are now escaped before saving an email to avoid
database errors.
* Pick date widgets were not being shown full size on IE8.
* Special characters in vcard files are converted when importing contacts.
* Improved compatibility with RSS readers - changed the "pubdate" tag to
"pubDate".
* When checking email through cron, the "max spam level" user config option
was disregarded.
* The User column for emails in the Oveview List was the owner of the email
account and not the user who wrote the email.
* User with read access to an email account didn't view emails in the
Overview List.
* Missing lang 'success archive files'.
* The string "None" was hardcoded in english in some fields of the time
report.
* User with permissions to edit owner company data could not edit the logo.
of scheduled update for editors/p5-Padre-Plugin-Catalyst.
This module provides Access Control List style path protection, with
arbitrary rules for Catalyst applications. It operates only on the
Catalyst private namespace, at least at the moment.
The two hierarchies of actions and controllers in Catalyst are:
* Private Namespace
Every action has its own private path. This path reflects the Perl
namespaces the actions were born in, and the namespaces of their
controllers.
* External Namespace
Some actions are also directly accessible from the outside, via a URL.
The private and external paths will be the same, if you are using
Local actions. Alternatively Path, Regex, or Global can be used to
specify a different external path for an action.
The ACL module currently only knows to exploit the private namespace. In
the future extensions may be made to support external namespaces as well.
When a path is visited, rules are tested one after the other, with the most
exact rule fitting the path first, and continuing up the path. Testing
continues until a rule explcitly allows or denies access.
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
0.10016 22 Jan 2010
- Move root actions out of applcation class in tests to remove
warnings in the latest Catalyst.
- Add AUTOLOAD method to the default user class so that methods are
delegated down onto the underlieing user object retrieved from
the store (if present)
- Fix typos in documentation (RT#49476)
- Fix compatibilty with Catalyst 5.70 (RT#50466)
- Various documentation improvements
- Fix Realm::Processive's authinfo_mungle option (RT#47106)
* inline: Avoid showing edit links if page editing is disabled. (Sjoerd)
* signinedit: Auto-disable the plugin when all authentication methods
are disabled.
* comments: Fix permalinks for comments using new conflict-free filenames.
* img: Support alignment of images with captions. (Giuseppe Bilotta)
* websetup: Fix utf-8 problems.
* websetup: Fix bug in array change detection.
* linkmap: Simplify and improve browser compatibility by using an
img, not object tag.
* git: The new git-notes feature in git 1.6.6 changes git log output
in a way that broke ikiwiki's parser if notes are added to commits.
* po: Avoid crash when a page is empty.
(security fixes are already by 0.11.5pl1nb1 in pkgsrc)
Trac-0.11.6.ja1 (Jan 24, 2010)
* Merge Trac-0.11.6
* Apply patch
- trac:changeset:8997
Trac 0.11.6 (November 28, 2009)
http://svn.edgewall.org/repos/trac/tags/trac-0.11.6
Trac 0.11.6 contains two security fixes and a number of bug fixes,
performance improvements and minor enhancements. The following list
contains only a few highlights:
Security fixes:
* Fixed the policy checks in report results when using alternate formats.
* Added a check for the "raw" role that is missing in docutils < 0.6.
Performance improvements:
* Re-enabled connection pooling with SQLite (#3446).
* Added caching of configuration options (#8510).
Bug fixes:
* Fixed the "database is locked" issue with SQLite (#3446, #8468).
* Deprecated SQLite 2.x support (#8625).
* Fixed hanlding of times in timezones with DST (#8240).
* Avoid corruption of trac.ini during write (#8623).
* Improved support for revision ranges in revision log view (#8349)
0.999914) in the NetBSD Packages Collection.
Mojo provides a minimal interface between web servers and Perl web
frameworks. Also included in the distribution are two MVC web
frameworks named Mojolicious and Mojolicious::Lite.
4.11 Fri Dec 18 2009: - Balint Szilakszi <szbalint at cpan.org>
- Fixed t/19multi.t for libcurl versions compiled with asyncronous dns resolution.
4.10 Fri Dec 18 2009: - Balint Szilakszi <szbalint at cpan.org>
- Added support for CURLINFO_SLIST in getinfo (patch by claes).
- Merging documentation fixes upstream from the FreeBSD port (thanks Peter).
- Added support for curl_multi_fdset.
indirectly, "configure" checks itself for it
-make "avahi" non-default (because we don't have nss support for it,
and it conflicts with "mdnsd" on NetBSD-current)
pkgsrc changes:
- Adding license definition
- Adjusting dependencies
- Adjusting module type
Upstream changes:
1.06 2010-01-09 19:21:00
- Added $body->cleanup(1) flag to enable auto-deletion of temporary
files during DESTROY. (Vany Serezhkin)
- Fixed parsing of multipart bodies with boundaries that contain
commas.
(Tomas Doran, http://rt.cpan.org/Public/Bug/Display.html?id=41407)
- Dropped YAML, we now use Perl as a serialization format in our
tests. We call this PAML ;)
Upstream changes:
Version 0.68 -- 31 Dec 2009 <mst@shadowcat.co.uk> Matt S Trout
o No changes since the previous development release.
Version 0.67_01 -- 20 Dec 2009 <mst@shadowcat.co.uk> Matt S Trout
o Add FILENO method which returns a defined but invalid value to
placate things such as IPC::Run which call fileno to check if a
filehandle is open.
Closes bugs:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=544540http://rt.cpan.org/Public/Bug/Display.html?id=50972
Removes need for upstream patch in OpenBSD <bobtfish@bobtfish.net>
o Call the fcgi lib's attach/detach <robs@fastcgi.com>
pkgsrc changes:
- Adjusting dependencies according to META.yml
Upstream changes:
1.44 Jan 4, 2010
[ ENHANCEMENTS ]
- Use Log::Any to log various events, such as the start and end of each
request and each component call.
- Add $m->log, allowing easy logging to a component-specific namespace.
- Fix use of CHI when no data directory is specified.
1.43 Dec 25, 2009
[ BUG FIXES ]
- If a component was located in a patch with spaces, the feature which
referred to errors by their source file line number was broken. This could
cause test failures if the package was downloaded into a path with spaces by
CPAN. Reported by Shawn Moore. RT #53072.
- HTML::Entities is no longer an optional dependency. This fixes some issues
with packaged versions of Mason. Reported by Jens Rehsack. RT #48890.
- $m->flush_buffer is now ignored when inside $m->scomp or $m->content. Patch
by Frederic Briere, with extra tests from Ruslan Zakirov. RT #38924.
pkgsrc changes:
- Adjusting module type - use "Module::Install::Bundled" directly
Upstream changes:
5.8003 28 Dec 2009
- Variety of typo fixes
- Fix incorrectness re :Global and :Local
- Update DevelopmentProcess.pod
5.8002 15 Nov 2009
- Update tutorial to match latest prepacked versions in Debian 5
- Add FormHandler branch (with thanks to gshank!)
- Misc cleanup/freshing up of tutorial.
- Fix indenting issue (with thanks to Kiffin Gish)
- Integrate tome fix branch (with thanks to tome!)
- Add a "negative" test to confirm that test02 does not have an admin create link
- Integrate sqlite3 clarification and link by wolfman2000 from tutorial_role_updates branch
- Fix Pod typos in ::Internals (RT#51488)
- Fix Pod typos in the Cookbook (RT#51466)
- Fix a Test::Pod failure and make Debian happier.
- Typo fixes from garu
- Misc minor and/or typo fixes
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
1.26 2010-01-12 03:55:50
- Depend on Catalyst::Plugin::Static::Simple 0.28 to avoid failures
caused by a bug in 0.27.
1.25 2010-01-02 16:13:06
- Update repository metadata after moving from svn to git.
1.24 2009-12-07 23:23:36
- File name for .yml file generated is now correct.
- Fixes for consistent spacing in generated application template.
- Stop requiring generated test files to have a true return value.
- Win32 compatibility fixes:
1) hardcoded 'make' replaced by: $Config{make}||'make'
2) testing executable flags skipped on Win32
- Fix pod to match option names on Catalyst::Script::Server
1.23 2009-12-06 12:22:12
- Fix generated app test to be multi-platform and fix issue with case
for generated files. (Dave Rolsky)
- Fix Test::More version dependency so that subtest works correctly.
- Add a $VERSION to Catalyst::Helper as PAUSE used to pull $VERSION
(i.e. 0.01) out of the app template section and use that, so we now
can't not have a version number here or it makes pause unhappy.
1.22 2009-12-05 07:23:00
- Use MooseX::Emulate::Class::Accessor::Fast so that options
supplied to ->new are put into the hash even if attributes
do not exist for them. This fixes -force recreating application
scripts.
1.21_01 2009-12-01 03:34:23
- Update generated scripts to use the new Catalyst::Script:: classes
available from Catalyst 5.80014_02.
Note: Any applications whos scripts are upgraded will need to depend
on at least this version of Catalyst.
- Change application templates from being inlined in Catalyst::Helper
to being in a share dir making the templates much easier to maintain
and patch.
- Generate new applications with Moose and Moose style components.
- Remove dependency on parent.pm as this has been removed from the generated
application template.
- Turn off deprecated regex component lookup in the config of new
applications.
- Test application generation and helper classes properly.
- Change tests in generated application and components to use the new
done_testing feature rather than having test plans.
- Update required versions of dependencies to ensure the installed versions
won't cause deprecation warnings with the latest Catalyst.
- Exclude root/, t/ and hidden dirs from file change monitoring when
using File::ChangeNotify 0.08+. (dew)
- Updated POD of Module/Install/Catalyst.pm (Karsten Heymann)
- Added debian package building temp files to the list
of ignored files/directories and fix ignore for subversion
checkouts. (Karsten Heymann)
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
0.05 Sun, 29 Nov 2009 17:38:51 +0100
* Depend on a later version of PadWalker to avoid segfaults in the
Catalyst test suite.
pkgsrc changes:
- Adjusting dependencies
- Adjusting module type to use bundled Module::Install
Upstream changes:
0.28 2010-01-04 13:15:00
- Fix issues in debug mode. (RT#53338)
0.27 2010-01-03 14:49:00
- Switch to being a Moose role, removing dependencies on
Class::Data::Inheritable and Class::Accessor (Andrey Kostenko in
RT#51089)
- Make Pod tests mandatory for authors but never run otherwise
- Switch to Test::NoTabs to ensure no tabs, rather than
Test::Perl::Critic
0.26 2009-12-06 12:30:00
- Fix Pod to show less nasty method of assigning config by calling
the config method with parameters, rather than poking around inside
the hash.
- Require newer (>= 0.15) Catalyst::Plugin::SubRequest for subrequest
tests as old versions don't work with new Catalyst (>= 5.80014)
pkgsrc changes:
- Adjusting dependencies
Upstream changes:
5.80018 2010-01-12 22:24:20
Bug fixed:
- Call ->canonical on URI derived from $ENV{REQUEST_URI} to get
paths correctly decoded. This bug was previously hidden by a bug
in HTTP::Request::AsCGI
Documentation:
- Clarify that uri_for_action works on private paths, with example.
Deprecations:
- Saying use Catalyst::Test; (without an application name or () to stop
the importer running is now deprecated and will issue a warning.
You should be saying use Catalyst::Test ();
5.80017 2010-01-10 02:27:29
Documentation:
- Fix docs for ->forward method when passed a class name - this should
be a component name (e.g. View::HTML, not a full class name, like
MyApp::View::HTML).
Bug fixes:
- --daemon and -d options to Catalyst::Script::FastCGI are fixed.
- Fix the debug dump for applications which use Catalyst::Plugin::Session
(RT#52898)
- Fix regression in the case where mod_rewrite is being used to rewrite
requests into a path below your application base introduced with the
%2F related fixes in 5.80014_02.
- Do not crash on SIGHUP if Catalyst::Engine::HTTP->run is not passed the
argv key in the options hash.
- Correctly pass the arguments to Catalyst::Script::Server through to
Catalyst::Engine::HTTP->run so that the server can restart itself
with the correct options on SIGHUP.
- Require new MooseX::MethodAttributes to be compatible with Moose
versions >= 0.93_01
- Require new MooseX::Role::WithOverloading to be compatible with Moose
versions >= 0.93_01
Cleanups:
- Stop suppressing warnings from Class::C3::Adopt::NEXT now that most plugins
have been updated to not use NEXT. If you get warnings then please upgrade
your components or log a bug with the component author if an upgrade is
not available. The Class::C3::Adopt::NEXT documentation contains information
about how to suppress the warnings in your application if you need to.
5.80016 2009-12-11 23:23:33
Bug fixes:
- Fix slurping a file to work correctly with binary on Win32 in the
encoding test controller.
Bug fixes in the new scripts (for applications which have been upgraded):
- Allow --restartdirectory as an option for the Server script, for
backwards compatibility. (Dave Rolsky)
- The --host option for the server script defaulted to localhost, rather
than listening on all interfaces, which was the previous default. (Dave
Rolsky)
- Restore -p option for pid file in the FastCGI server script.
- Fix the script environment variables MYAPP_PORT and MYAPP_RELOAD RT#52604
- Fix aliasing applications under non-root paths with mod_rewrite in
some apache versions where %ENV{SCRIPT_NAME} is set to the real name of
the script, by using $ENV{REDIRECT_URL} which contains the non-rewritten
URI.
- Fix usage display when myapp_create.pl is run with no arguments. RT#52630
New features:
- The __MOP__ hash element is suppressed from being dumped fully
(and instead stringified) when dumping the error screen to be
less packed with information of no use.
Documentation:
- Fix Pod nits (RT#52370)
5.80015 2009-12-02 15:13:54
Bug fixes:
- Fix bug in Catalyst::Engine which would cause a request parsing to end
prematurely in the hypothetical case where calling $engine->read returned
the single character '0'.
- Fix failing tests when combined with new HTTP::Request::AsCGI
Documentation:
- Improved documentation on read and read_chunk methods in Catalyst::Engine.
- Fix reversal of SCRIPT_NAME and PATH_INFO in previously correct nginx
FastCGI documentation introduced in _02.
5.80014_02 2009-12-01 00:55:23
Bug fixes:
- Fix reporting the wrong Content-Length if the response body is an
upgraded string. Strings mean the same thing whether or not they are
upgraded, may get upgraded even after they are encoded, and will
produce the same output either way, but bytes::length returns too big
values for upgraded strings containing characters >127
- Fix t/live_fork.t with bleadperl (RT#52100)
- Set $ENV{PATH_INFO} from $ENV{REQUEST_URI} combined with
$ENV{SCRIPT_NAME} if possible. This is many web servers always fully
decode PATH_INFO including URI reserved characters. This allows us to
tell foo%2cbar from foo%252cbar, and fixes issues with %2F in paths
being incorrectly decoded, resulting in too many path parts (rather
than 1 path part containing a /, on some web servers (at least nginx).
(RT#50082)
- Require new HTTP::Request::AsCGI so that it fully decodes $ENV{PATH_INFO}
in non CGI contexts. (RT#50082)
Refactoring / cleanups:
- NoTabs and Pod tests moved to t/author so that they're not run
(and then skipped) normally.
Documentation:
- Fix Pod nits in Catalyst::Response (RT#51818)
5.80014_01 2009-11-22 20:01:23
Bug fixes:
- Filehandle now forced to binmode in CGI and FastCGI engines. This appears
to correct some UTF-8 issues, but may break people's code which relies
on the old behaviour.
Refactoring / cleanups:
- Plugins which inherit from Catalyst::Controller or Catalyst::Component
are deprecated and now issue warnings.
pkgsrc changes:
- Correcting license
Upstream changes:
1.2 2010-01-12
- Fixed the %ENV concatenation that's broken in 1.1 but wasn't shipped to CPAN (miyagawa)
- REQUEST_URI is trying to replicate as raw values as possible, without being canonicalized (miyagawa)
1.1 2009-12-07
- added test to check that %ENV is preserved after setup is called
- setup now concatenates its environment to %ENV instead of replacing it
1.0 2009-11-30
- Change how PATH_INFO is decoded so that everything is decoded, including
URI reserved characters (RT#50082)
Padre import.
This module attempts to answer, as accurately as it can, one of the nastiest
technical questions there is.
Am I on the internet?
That is, it's a problem that had no clean permanent solution, and for which
you could just keep writing more and more functionality indefinitely,
asymtopically approaching 100% correctness but never reaching it.
And so this module is intended to do as good a job as possible, without
having to resort to asking any human questions (who may well get it wrong
anyway), and limiting itself to a finite amount of programming work and a
reasonable level of memory overhead to load the code.
pkgsrc changes:
- Adjusting dependency of core modules
Upstream changes:
2009-12-30 Release 1.52 - Gisle Aas <gisle@ActiveState.com>
Gisle Aas (7):
Encode::decode('UTF-8',...) with callback implemented in 2.39
%%host%% hack can be removed when URI::_server::as_iri works
Don't croak on IRIs that can't be IDNA encoded
IDNA roundtrip test on wrong variable
Check behaviour when feeded URI constructor Latin-1 chars
Add some test examples from draft-duerst-iri-bis.txt
Need to recognize lower case hex digits as well
django-registratio is a simple application which provides flexible
user registration for Django-based projects. The default setup
implements a fairly common workflow:
1. User signs up for account.
2. User receives an email containing instructions for activating
the account.
3. User activates and begins using the site.
he TYPO3 core team has just released TYPO3 version 4.3.1, which is now
ready for you to download. It is a maintenance release of the current
stable branch 4.3 and contains bugfixes and security fixes.
IMPORTANT: This version includes important security fixes to the TYPO3
core. A security announcement has just been released:
http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/
For details about the release, see:
http://wiki.typo3.org/index.php/TYPO3_4.3.1
Problem noticed by Bug Hunting via PR#42609.
At the moment, MASTER_SITES is commented out.
Although it is linked from HOMEPAGE, but only have very old version now.
(and tarball from http://pypi.python.org/pypi/urlgrabber is checksum mismatch).
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4405
From release notes at:
http://trac.edgewall.org/browser/tags/trac-0.11.6/RELEASE
November 28, 2009
Trac 0.11.6 contains two security fixes and a number of bug fixes,
performance improvements and minor enhancements.
Changes in 0.11.6
* Fixed the policy checks in report results when using
alternate formats.
* Added a check for the "raw" role that is missing in docutils
< 0.6.
* Re-enabled connection pooling with SQLite (#3446).
* Added caching of configuration options (#8510).
* Fixed the "database is locked" issue with SQLite (#3446,
#8468).
* Deprecated SQLite 2.x support (#8625).
* Fixed hanlding of times in timezones with DST (#8240).
* Avoid corruption of trac.ini during write (#8623).
* Improved support for revision ranges in the revision log
view (#8349)
updating during freeze approved by wiz@
* pagestats: Add show parameter. Closes: #562129
* toc: Add startlevel parameter. (kerravonsen)
* comments: Add a checksum to the name of comment pages, to avoid
merge conflicts when comments are posted to two branches of a site.
* linkmap: Add option to omit disconnected pages from the map.
* inline: Fix bug that limited displayed pages when feedshow was
specified w/o show.
* Fix several places that did not properly handle capitalization of
the discussionpage setting. Specifically, fixes discussion actions
on discussion pages, and unbreaks the opendiscussion plugin.
Updating during the freeze for relevant bugfixes, particularly this last.
It initially existed originally came from PR#27567 for www/apache2.
CVE-2007-3304 parts was added in rev 1.2, then whole patch file was removed in
rev 1.3 as update to apache-2.2.6, because the update contains fix for
CVE-2007-3304 and comments of patch-ab only mentioned about the CVE.
To prevent a recurrence of such a accident, added PR#27567 as comments
for patch-ab.
Changes to squid-3.0.STABLE21 (22 Dec 2009):
- Bug 2830: Clarify where NULL byte is in headers.
- Bug 2778: Linking issues using SunCC
- Bug 2395: FTP errors not displayed
- Bug 2155: Assertion failures on malformed Content-Range response headers
- Fix parsing and a few bugs in ACL time type
- Fix RFC keep-alive compliance on intercepted replies
- Improved security hardening on %nn parser
- Replace several GCC-specific code snippets.
* Add complete Spanish basewiki translation done by Fernando Gonzalez de
Requena.
* Improve javascript onload handling.
* monotone: Deal with format change in version 0.45.
(Thanks, Richard Levitte)
* cvs: Add missing bit to Automator.
* attachment: Fix reversion in attachment sorting by age.
* Fix utf-8 problems in rename, remove, attachment, 404, sourcepage, and
goto.
Updating this leaf during the freeze for the bugfixes.
Approved by wiz@
Feng Office formerly known as OpenGoo is an easy to use Open
Source Web Office.
Manage tasks, documents, contacts, e-mail, calendar, and more...
Manage project progress, track time, and bill your customers.
Access all information from a single and elegant dashboard.
Communicate with co-workers, clients and vendors.
Drupal 6.15, 2009-12-16
----------------------
- Fixed security issues (Cross site scripting), see SA-CORE-2009-009.
- Fixed a variety of other bugs.
other pkgsrc changes:
* Add PKG_DESTDIR_SUPPORT spport.
* Use REPLACE_INTERPRETER.
* Change default.settings.php handling to fix PR pkg/42355.
Drupal 5.21, 2009-12-16
-----------------------
- Fixed a security issue (Cross site scripting), see SA-CORE-2009-009.
- Fixed a variety of small bugs.
While here, switch NetBSD build from sunaudio to OSS emulation.
This greatly improves HTML5 video playback.
(Yes, we ought to fix the busted sunaudio support or PKG_OPTIONalize this.
Perhaps another day.)
Advisories relating to this release:
MFSA 2009-71 GeckoActiveXObject exception messages can be used to
enumerate installed COM objects
MFSA 2009-70 Privilege escalation via chrome window.opener
MFSA 2009-69 Location bar spoofing vulnerabilities
MFSA 2009-68 NTLM reflection vulnerability
MFSA 2009-67 Integer overflow, crash in libtheora video library
MFSA 2009-66 Memory safety fixes in liboggplay media library
MFSA 2009-65 Crashes with evidence of memory corruption (rv:1.9.1.6/ 1.9.0.16)
2009-11-21 Release 5.834
Gisle Aas (4):
Check for sane default_headers argument [RT#50393]
Add $ua->local_address attribute [RT#40912]
Test that generation of boundary works [RT#49396]
Page does not display the "standard" apache listing any more
Ville Skyttä (2):
Remove unneeded executable permissions.
Switch compression/decompression to use the IO::Compress/IO::Uncompress and
Compress::Raw::Zlib family of modules.
Slaven Rezic (1):
lwp-request should use stderr for auth [RT#21620]
2009-11-23 Gisle Aas <gisle@ActiveState.com>
Release 1.51
Fixup a test that was broken on Windows
2009-11-21 Gisle Aas <gisle@ActiveState.com>
Release 1.50
The main news in this release is the initial attempt at providing
support to IRIs. URI objects now support the 'as_iri' and 'ihost'
methods.
Gisle Aas (28):
Added more tests for setting IPv6 addresses using the host method
Document how the host methods deal with IPv6 addresses
A "test case" to start IDNA prototype from
Escape IDNA hostnames
Introduce the as_unicode method
Make as_unicode undo punycode for server URLs
An IRI class might be helpful (RFC 3987)
Must punycode each part of the domain name separately
Include initial private Punycode module
Get URI::_punycode working
punycode of plain ascii should not edit with "-"
Some more tests from RFC 3492
Add private URI::_idna module based on encodings/idna.py
Start using URI::_idna for encoding of URIs
Avoid various use of undef warnings
Fix test affected by IDNA
Keep reference to IDNA::Punycode in the URI::_punycode docs
Ensure upgraded strings as input
Update manifest with the new idna/punycode files
Rename as_unicde to as_iri
draft-duerst-iri-bis-07: The proposed RFC 3987 update
Load Encode when its used
Rename host_unicode as ihost
Add basic iri test
Hack to make as_iri turn A-labels into U-labels
Make as_iri leave escapes not forming valid UTF-8 sequences
Merge branch 'iri'
Don't include RFCs in the cpan tarball
Michael G. Schwern (3):
Fix != overloading to match ==
Note that mailto does not contain a host() and this is not a bug.
Strip brackets off IPv6 hosts [RT#34309]
even when python is enabled, comment out python dependency.
New in version 0.3.0
====================
* WARNING!!! Slight API change!!! see docs
for px_proxy_factory_get_proxies()
* Credentials support (see API change above)
* A complete rewrite of the module manager
* file:// as valid PAC URLs
* Sample Mono application
* Automake 1.11 shaved output
* gnome backend rewrite (now w/o thread issues)
* Test suite base functionality exists
* Many solaris build fixes
* Seamonkey support as JS pacrunner
* Bugfixes
* Compiles for MS Windows using Mingw
Since 1.6-rc
------------
bugfix: Some widgets in the dashboard showed wrong icons when item spanned more than one line.
bugfix: Template subtasks don't keep linked objects.
bugfix: Query error when upgrading from 1.5.3.
bugfix: Missing lang for archived objects in objects' history.
bugfix: Don't allow trashing the owner company.
bugfix: Opengoo stops working if owner company was trashed.
bugfix: When discarding an email, two confirmation prompts pop up.
bugfix: When clicking on print report, on time module, the active workspace should be set as the workspace for the report.
bugfix: Linked "Weblink files" showed a "Download" shortcut instead of an "Open weblink" shortcut.
bigfix: Importing calendar ics file wasn't working.
bugfix: When editing a document, tags were lost.
bugfix: Send email buttons unaligned on some languages.
bugfix: Some contact websites were missing the "http://" in the contacts listing.
bugfix: Fixed detection of autodetect timezone config option.
bugfix: Repeating events a fixed number of times didn't show the last repetition.
bugfix: Changed how quoted text is hidden.
bugfix: Added a tabstop to HTML email composing.
bugfix: Sorting emails by subject sorted by date.
bugfix: Sometimes completed tasks were shown when filtering by "Pending" (completed_by_id was 0).
Since 1.6-beta3
---------------
feature: User config option to hide quoted text added.
feature: Added a cron event to clear tmp folder.
usability: Added an icon for archived objects on the object's view, like there is for trashed objects.
usability: When deleting a company warn about deleting users.
bugfix: Displaying a document in IIS showed "Connection reset error".
bugfix: Tags with accents don't filter correctly on IE.
bugfix: '24 hour' / 'AM-PM' user config option not respected in listings.
bugfix: Add user: billing category is mandatory, it shouldn't be mandatory.
bugfix: Error importing companies when no workspace is selected.
bugfix: If forwarding an email with attachments, saving a draft, and sending the email, an error pops up about not being able to attach.
bugfix: When importing contacts from a vCard file, all contacts with no email were considered as the same contact.
bugfix: Fixed several Errors and warnings logged in log.php.
bugfix: Objects of archived workspaces were not being filtered out.
bugfix: Archived documents and messages were not being filtered out of the Dashboard.
bugfix: Search results were printed in reverse modified date order.
bugfix: Contact birthdays were not being shown in the dashboard calendar.
bugfix: When viewing a custom report, date parameters in conditions were shown as today's date.
Since 1.6-beta2
---------------
usability: Added pagination to the Time module.
usability: Show 'Archived by' in object properties if an object is archived.
usability: Show read/unread status in Dahsboard/View as list.
usability: Warn a user when replying or forwarding an email and a new email arrives at the conversation.
usability: Add the magnifying glass to the email views.
usability: Removed 'Account already being checked' error message.
bugfix: An empty 'Custom properties' fieldset is shown in 'Update profile'.
bugfix: Fix autodetect timezone with DST and enable by default.
bugfix: Check mail doesn't refresh view if an error occurs in one account.
bugfix: Filtering email conversations by tag is not working correctly. It should show a conversation if any one email in it is tagged.
bugfix: If someone replies to an email but changes the subject the email should be put into a new conversation.
bugfix: If you delete the newest email in a conversation, the conversation is no longer listed (when email is shown as conversation).
bugfix: Notifications are not sent when subscribing from 'Modify subscribers'.
bugfix: Put default repetition value for repeating events and tasks.
bugfix: Remove illegal UTF-8 characters before saving an email.
bugfix: Save custom fields when saving an email draft.
bugfix: Sort emails by received date instead of sent date in email listing and in conversation listing (in email view).
bugfix: Value for 'mail_drag_prompt' user config option is not loaded correctly.
bugfix: Wrap HTML emails in a div with CKEditor style.
bugfix: Delete conversation after deleting last email in conversation.
bugfix: An email's quoted reply is deleted when changing 'From' account.
bugfix: Replying to an email, saving as draft, loading the draft and sending the email doesn't add the reply to the conversation.
bugfix: Unauthenticated content warnings over SSL in FF 3.5.
bugfix: User-type custom reports fail to execute.
bugfix: When a file is downloaded it should be marked as read.
bugfix: Wrong initial email filters for new installations.
Since 1.6-beta
--------------
feature: Added an experimental new search mechanism. It can be much slower but finds more results.
usability: Added description to system permissions
usability: CKEditor is shown in user's language
usability: Linked objects section in an object's view has no title telling what it is
bugfix: Check write permissions for file installed_version.php when upgrading
bugfix: CKEditor images should point to the actual image in OpenGoo
bugfix: Contact import from csv does not import contacts if user does not have 'can manage contacts' permission but has write permissions on the workspace.
bugfix: Custom reports can only be printed once in Chrome.
bugfix: Edit comment textbox is too small.
bugfix: Email links are opened on the email's body when showing quoted text.
bugfix: Error 500 when adding a file web link.
bugfix: Forgot password token is always the same.
bugfix: If I click on 'Print' when on 'Time' tab it should print by default 'General Timeslots' or 'All timeslots', not 'Task timeslots'.
bugfix: If you delete a signature with images from the email's body, the images are sent anyway.
bugfix: MySQL Error Message when adding a user and no data has been entered.
bugfix: Removed private milestone options.
bugfix: Search ignores tags on newly uploaded files.
bugfix: Show all linked objects pagination is not working correctly.
bugfix: Show that an email has attachment on search results.
bugfix: Changed all PHP 5.3 deprecated functions for non-depracated alternatives.
bugfix: When printing reports: substitute true/false with yes/no.
bugfix: When user does not have write contact permissions over a workspace, import from csv does not display errors.
bugfix: HTML editor's height is not adjusted correctly when changing format in a new email.
bugfix: Error when creating new user.
bugfix: Error when adding a task.
- Regression Fix: myip ACL not accepted in config
- Bug 2795: acl arp lookups including port
- Bug 2794: ESI parsing fails on FreeBSD
- Bug 2778: fix linking issues using SunCC
- Bug 2724: eCAP build failure unless ICAP enabled
- Bug 2628: Correct default PID location to PREFIX/var/run/squid.pid
- Bug 2617: Performance degradation during processing list of dstdomain ACL's
- Bug 2374: Support ICY / ICEcast / SHOUTcast streaming protocol.
- Fix: 64-bit filesize issue in squidclient POST of large files
- Fix: send correct Connection: header on intercepted replies
- Support libtool 2.x
- ESI libraries libexpat and libxml2 now optional
- ESI support default enabled
- Bump libcap minimum requirement to libcap 2.09+
- ARP / MAC support fixes for IPv6-mode
- Add outstanding IPv6 settings to squid.conf (localnet, localhost)
- ... and many additions to the background testing structure
- ... and very many minor build and code cleanups for non-GCC compilers.
KDE SC 4.3.4 has a number of improvements:
* A bugfix in Plasma's pixmap cache makes the workspace more responsive
* Okular, the document viewer improved stability in certain situations
* Marble, the desktop globe has seen some polish
* Passphrases with non-ASCII characters have been fixed in the KGpg
encryption tool
* meta: Generate meta description tags even when the html scrubber is enabled.
* meta: Allow use of DESCRIPTION in templates to get at the meta
description value. (Thanks, NicolasLimare)
* inline: Use caching of inlined pages to speed up builds of inlines
that include feeds. Speedup of about 25% for small inlines; could
be much larger for inlines of many, or complex pages.
* Added (incomplete) Turkish po file. Closes: #556744 Thanks, Recai Oktas
* date: New plugin that allows inserting date directives that expand
to pretty-printed dates, using the same formatting as used for page
modification date display, etc.
* htmllink: Allow a title attribute to be specified.
* calendar: Add title attributes for all links in the calendars.
* calendar: Fix month wraparound error that broke in December.
pkgsrc changes:
* In the automated setup, recognize CVS as a VCS (found by agc@).
* In MESSAGE, link to <URL:http://ikiwiki.info/setup/> (ditto).
