Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: rack/rack
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v2.2.8.1
Choose a base ref
...
head repository: rack/rack
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v2.2.11
Choose a head ref
  • 9 commits
  • 11 files changed
  • 8 contributors

Commits on Aug 4, 2023

  1. Configuration menu
    Copy the full SHA
    3314622 View commit details
    Browse the repository at this point in the history
  2. Update CHANGELOG for 2.2.8 (#2107)

    Adds the backport PR #2092
    dentarg authored Aug 4, 2023
    Configuration menu
    Copy the full SHA
    99057e6 View commit details
    Browse the repository at this point in the history

Commits on Sep 13, 2023

  1. backport #2104 (#2121)

    Return empty when parsing a multi-part POST with only one end delimiter.
    
    Fixed: #2103
    
    Sending the following request in a browser generates a request with
    with only one end delimiter.
    
    ```javascript
    const formData = new FormData();
    const request = new Request('http://127.0.0.1:8080/', {
      method: 'POST',
      body: formData,
    });
    const response = fetch(request);
    ```
    
    ```
    curl 'http://127.0.0.1:8080/' \
      -H 'Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryR1LC4tR6ayskIXJm' \
      --data-raw $'------WebKitFormBoundaryR1LC4tR6ayskIXJm--\r\n'
    ```
    
    This request is not compliant RFC7578, but is generated by major browsers such as
    FireFox and Chrome.
    Supporting this request will cause the multipart parser to return an empty value.
    alpaca-tc authored Sep 13, 2023
    Configuration menu
    Copy the full SHA
    fdb12cb View commit details
    Browse the repository at this point in the history

Commits on Feb 21, 2024

  1. Merge branch '2-2-sec' into 2-2-stable

    * 2-2-sec:
      bump version
      Avoid 2nd degree polynomial regexp in MediaType
      Return an empty array when ranges are too large
      Fixing ReDoS in header parsing
    tenderlove committed Feb 21, 2024
    Configuration menu
    Copy the full SHA
    f7d40f9 View commit details
    Browse the repository at this point in the history

Commits on Mar 21, 2024

  1. Bump patch version.

    ioquatix committed Mar 21, 2024
    Configuration menu
    Copy the full SHA
    b1deebd View commit details
    Browse the repository at this point in the history

Commits on Sep 9, 2024

  1. [2.2-stable] Fix compatibility issues with Ruby 3.4.0dev (#2248)

    * Remove dependency on `base64`
    
    The gem was made a default gems, so it should be added to the gemspec,
    but most gems out there decided to just use `pack/unpack` to not add
    a dependency, that's the approach I used there.
    
    * Fix URI deprecation warnings
    
    Ref: ruby/uri#114
    
    * Update CI matrix
    
    * Restore Ruby 2.3 compatibility
    
    ---------
    
    Co-authored-by: Jean Boussier <jean.boussier@gmail.com>
    casperisfine and byroot authored Sep 9, 2024
    Configuration menu
    Copy the full SHA
    6ae7057 View commit details
    Browse the repository at this point in the history

Commits on Oct 14, 2024

  1. Bump patch version.

    ioquatix committed Oct 14, 2024
    Configuration menu
    Copy the full SHA
    14c9dec View commit details
    Browse the repository at this point in the history

Commits on Feb 12, 2025

  1. Configuration menu
    Copy the full SHA
    f8b41c1 View commit details
    Browse the repository at this point in the history
  2. Bump patch version.

    ioquatix committed Feb 12, 2025
    Configuration menu
    Copy the full SHA
    aa5a0f5 View commit details
    Browse the repository at this point in the history
Loading