- Attribute generation now correctly respects the value of autoEscape()
- Fixed endofrm() syntax error
- Fixed bug in redirect header handling
- Added P3P option to header()
- Patches to make CGI::Carp work correctly with object-oriented exceptions
- Removed inaccurate description of how to set multiple cookies from
CGI::Cookie pod file
- Patch to prevent running out of filehandles when uploading lots of files
- Documentation enhancement to note that the import_names() method
transforms the parameter names into valid Perl names
- Patch to suppress lang attribute in <html> tag if not provided explicitly
- Patch to fix broken XHTML-transitional 1.0 validation on endform()
- Custom html header fix (first letter correctly upcased now)
- Added a -verbatim option to stylesheet generation
- Faster delete() method
- Added empty charset support
- Patch to fix file upload failures when uploaded file is a multiple of 4096
- Fixed behavior of ACTION tag when POSTING to a URL that has a query
string
- Patch to handle multipart/mixed uploads from Opera
Edited list of changes (many bug fixes removed):
Version 2.87
1. Security hole patched: when processing multipart/form-data postings,
most arguments were being untainted silently. Returned arguments are
now tainted correctly. This may cause some scripts to fail that used
to work (thanks to Nick Cleaton for pointing this out and persisting
until it was fixed).
2. Update for mod_perl 2.0.
3. Pragmas such as -no_xhtml are now respected in mod_perl environment.
Version 2.84
2. HTML escaping code now replaced 0x8b and 0x9b with unicode references
< and *#8250;
Version 2.83
3. Added Max-Age to list of CGI::Cookie headers.
Version 2.82
1. Patch from Rudolf Troller to add attribute setting and option groups
to form fields.
3. Patch from Scott Gifford allows you to set the program name for
CGI::Carp.
Version 2.81
1. Removed extraneous slash from end of stylesheet tags generated by
start_html in non-XHTML mode.
2. Changed behavior of CGI::Carp with respect to eval{} contexts so that
output behaves properly in mod_perl environments.
Version 2.80
2. Changed checked="1" to checked="checked" for real XHTML compatibility.
3. Resurrected REQUEST_URI code so that url() works correctly with
multiviews.
<briggs@ninthwonder.com>. If you use CGI.pm, then this update is highly
recommended. Changes from version 2.75.2 include:
* Changes to CGI::Carp to avoid "subroutine redefined" error messages.
* Default DTD is now XHTML 1.0 Transitional
* Patches to support all HTML4 tags.
* Added ability to change encoding in <?xml> assertion.
* Fixed the old escapeHTML('CGI') ne "CGI" bug
* In accordance with XHTML requirements, there are no longer any
minimized attributes, such as "checked".
--> Patched bug which caused file uploads of exactly 4096 bytes to be
truncated to 4094 (thanks to Kevin Mahony)
* New tests and fixes to CGI::Pretty (thanks to Michael Schwern).
* New esc.t regression test for EBCDIC translations courtesy Peter
Prymmer.
* Patches from James Jurach to make compatible with FCGI-ProcManager
* Additional fields passed to header() (like -Content_disposition) now
honor initial capitalization.
* Patch from Andrew McNaughton to handle utf-8 escapes (%uXXXX codes) in
URLs.
The automatic truncation in gensolpkg doesn't work for packages which
have the same package name for the first 5-6 chars.
e.g. amanda-server and amanda-client would be named amanda and amanda.
Now, we add a SVR4_PKGNAME and use amacl for amanda-client and amase for
amanda-server.
All svr4 packages also have a vendor tag, so we have to reserve some chars
for this tag, which is normaly 3 or 4 chars. Thats why we can only use 6
or 5 chars for SVR4_PKGNAME. I used 5 for all the packages, to give the
vendor tag enough room.
All p5-* packages and a few other packages have now a SVR4_PKGNAME.
1. Fixed bug in server push boundary strings (CGI.pm and CGI::Push).
2. Fixed bug that occurs when uploading files with funny characters in
the name
3. Fixed non-XHTML-compliant attributes produced by textfield()
4. Added EPOC support.
5. Fixed minor XHTML bugs.
6. Made escape() and unescape() symmetric with respect to EBCDIC.
7. Removed uninitialized variable warning from CGI::Cookie.
8. Fixed bug in CGI::Pretty that causes it to print partial end tags when
the $INDENT global is changed.
9. Single quotes are changed to character entity ' for compatibility with
URLs.
* Quashed one-character bug that caused CGI.pm to fail on file uploads.
* Added -base to the list of arguments accepted by url().
* Fixes to XHTML support.
* POST parameters no longer show up in the Location box.
ones to do, and each compiled and installed/de-installed apparently
correctly.
As a side effect of the dynamic PLIST, we no longer need to have separate
-static and -shared PLISTs. It's now easier than ever to make a perl5
package for NetBSD :)
