summaryrefslogtreecommitdiff
Commit message (Expand)AuthorAgeFilesLines
* Fix comment about max Content-Disposition parametersHEADmainJeremy Evans2023-04-281-1/+1
* Limit max size and number of parameters parsed for Content-DispositionJeremy Evans2023-04-282-1/+36
* Handle invalid Content-Disposition filename encodingsJeremy Evans2023-04-281-6/+11
* Add Content-Disposition parameter parserJeremy Evans2023-04-282-50/+162
* Add specs for underscore in host (#2072)Jeremy Evans2023-04-251-0/+9
* Limit file extension length of multipart tempfiles (#2069)Patrik Ragnarsson2023-04-252-1/+25
* Update MIME types associated to font extensions `.ttf`, `.woff`, `.woff2`, an...David Stosik2023-04-032-4/+6
* Handle string reuse by body.each when buffering bodies in Rack::Response (#2044)Jeremy Evans2023-03-242-0/+21
* Fix borked changelog.Samuel Williams2023-03-231-10/+14
* Changelog: fix typo in version number (#2063)Patrik Ragnarsson2023-03-231-1/+1
* Do not allow BodyProxy to respond to to_str, make to_ary call closeJeremy Evans2023-03-202-8/+48
* Update changelog.Samuel Williams2023-03-161-1/+17
* Make query parameters without = have nil values (#2059)Jeremy Evans2023-03-167-297/+64
* Prefer to use `query_parser` itself as the cache key. (#2058)Samuel Williams2023-03-161-2/+3
* Add mjs MIME type (#2057)Achilleas Pipinellis2023-03-162-0/+2
* Fix handling of cached values in `Rack::Request`. (#2054)Samuel Williams2023-03-152-49/+171
* Store downcased common headers at class level (#2046)Akira Matsuda2023-03-131-2/+85
* Avoid rebuilding regex (#2042)John Hawthorn2023-03-131-1/+2
* Add `QueryParser#missing_value` for handling missing values + tests. (#2052)Samuel Williams2023-03-133-3/+46
* Simplify security policy.Samuel Williams2023-03-121-47/+4
* Split form/query parsing into two steps (#2038)Matthew Draper2023-03-125-41/+129
* test-external.yaml - use ruby/setup-ruby-pkgs (#2048)MSP-Greg2023-03-091-11/+3
* `apt-get update` before `apt-get install`.Samuel Williams2023-03-091-1/+3
* Add frozen_string_literal magic comment to all .rb files (#2045)Akira Matsuda2023-03-083-0/+6
* Limit all multipart parts, not just filesJohn Hawthorn2023-03-025-15/+84
* Enhance documentation (contains -> is a) (#2041)Younes Serraj2023-03-011-2/+2
* Add JS MIME type change to CHANGELOG (#2040)Patrik Ragnarsson2023-02-261-0/+1
* Prefer `text/javascript` as that's the current recommended mime type for Java...Samuel Williams2023-02-181-1/+1
* Remove `autoload :Chunked, "rack/chunked"` (#2031)MSP-Greg2023-01-291-1/+0
* Make QueryParser::Params a Hash subclassJeremy Evans2023-01-234-65/+7
* Fix some unused variable verbose warningsJeremy Evans2023-01-222-2/+2
* Remove outdated contributing guideline (#2025)Michael Herold2023-01-221-9/+0
* Remove single-character classes from query parser (#2024)Michael Herold2023-01-221-2/+2
* Update CHANGELOG.Samuel Williams2023-01-201-2/+15
* Add general `Rack::BadRequest`. (#2019)Samuel Williams2023-01-207-8/+40
* Make `env['rack.input']` optional. (#2018)Samuel Williams2023-01-1911-43/+79
* Ignore CI failures for Ruby 2.4 and 2.5Jeremy Evans2023-01-191-0/+2
* Try to fix CI issue on Ruby 2.5 (#2021)Jeremy Evans2023-01-193-6/+13
* Update Richard Schneeman in mailmap.Samuel Williams2023-01-191-0/+1
* Introduce mailmap for accurate git log and other commands. (#2017)Samuel Williams2023-01-181-0/+16
* Make RFC2183 work with Ruby 3.2's caching Regexp (#2014)John Hawthorn2023-01-171-1/+1
* Merge branch '3-0-sec'Aaron Patterson2023-01-172-7/+8
|\
| * bump versionv3.0.4.1Aaron Patterson2023-01-171-1/+1
| * Update changelogAaron Patterson2023-01-171-0/+6
| * Fix ReDoS vulnerability in multipart parserAaron Patterson2023-01-171-1/+1
| * Fix ReDoS in Rack::Utils.get_byte_rangesAaron Patterson2023-01-171-5/+6
| * Forbid control characters in attributesJohn Hawthorn2023-01-171-1/+1
| * Bump patch version.v3.0.4Samuel Williams2023-01-172-1/+7
| * `Rack::Request#POST` should consistently raise errors. (#2010)Samuel Williams2023-01-173-19/+45
| * Fix Rack::Lint error message for HTTP_CONTENT_TYPE and HTTP_CONTENT_LENGTH (#...Jean byroot Boussier2023-01-171-1/+1
View Lorry Controller Status