summaryrefslogtreecommitdiff
path: root/lib
Commit message (Expand)AuthorAgeFilesLines
* Fix comment about max Content-Disposition parametersHEADmainJeremy Evans2023-04-281-1/+1
* Limit max size and number of parameters parsed for Content-DispositionJeremy Evans2023-04-281-1/+10
* Handle invalid Content-Disposition filename encodingsJeremy Evans2023-04-281-6/+11
* Add Content-Disposition parameter parserJeremy Evans2023-04-281-50/+82
* Limit file extension length of multipart tempfiles (#2069)Patrik Ragnarsson2023-04-251-1/+3
* Update MIME types associated to font extensions `.ttf`, `.woff`, `.woff2`, an...David Stosik2023-04-031-4/+4
* Handle string reuse by body.each when buffering bodies in Rack::Response (#2044)Jeremy Evans2023-03-241-0/+1
* Do not allow BodyProxy to respond to to_str, make to_ary call closeJeremy Evans2023-03-201-2/+18
* Make query parameters without = have nil values (#2059)Jeremy Evans2023-03-164-215/+51
* Prefer to use `query_parser` itself as the cache key. (#2058)Samuel Williams2023-03-161-2/+3
* Add mjs MIME type (#2057)Achilleas Pipinellis2023-03-161-0/+1
* Fix handling of cached values in `Rack::Request`. (#2054)Samuel Williams2023-03-151-44/+110
* Store downcased common headers at class level (#2046)Akira Matsuda2023-03-131-2/+85
* Avoid rebuilding regex (#2042)John Hawthorn2023-03-131-1/+2
* Add `QueryParser#missing_value` for handling missing values + tests. (#2052)Samuel Williams2023-03-132-3/+13
* Split form/query parsing into two steps (#2038)Matthew Draper2023-03-124-37/+124
* Add frozen_string_literal magic comment to all .rb files (#2045)Akira Matsuda2023-03-082-0/+4
* Limit all multipart parts, not just filesJohn Hawthorn2023-03-022-8/+33
* Enhance documentation (contains -> is a) (#2041)Younes Serraj2023-03-011-2/+2
* Prefer `text/javascript` as that's the current recommended mime type for Java...Samuel Williams2023-02-181-1/+1
* Remove `autoload :Chunked, "rack/chunked"` (#2031)MSP-Greg2023-01-291-1/+0
* Make QueryParser::Params a Hash subclassJeremy Evans2023-01-231-53/+1
* Fix some unused variable verbose warningsJeremy Evans2023-01-221-1/+1
* Remove single-character classes from query parser (#2024)Michael Herold2023-01-221-2/+2
* Add general `Rack::BadRequest`. (#2019)Samuel Williams2023-01-205-7/+35
* Make `env['rack.input']` optional. (#2018)Samuel Williams2023-01-194-28/+42
* Make RFC2183 work with Ruby 3.2's caching Regexp (#2014)John Hawthorn2023-01-171-1/+1
* Merge branch '3-0-sec'Aaron Patterson2023-01-172-7/+8
|\
| * bump versionv3.0.4.1Aaron Patterson2023-01-171-1/+1
| * Fix ReDoS vulnerability in multipart parserAaron Patterson2023-01-171-1/+1
| * Fix ReDoS in Rack::Utils.get_byte_rangesAaron Patterson2023-01-171-5/+6
| * Forbid control characters in attributesJohn Hawthorn2023-01-171-1/+1
| * Bump patch version.v3.0.4Samuel Williams2023-01-171-1/+1
| * `Rack::Request#POST` should consistently raise errors. (#2010)Samuel Williams2023-01-172-19/+29
| * Fix Rack::Lint error message for HTTP_CONTENT_TYPE and HTTP_CONTENT_LENGTH (#...Jean byroot Boussier2023-01-171-1/+1
| * Rack::MethodOverride handle QueryParser::ParamsTooDeepError (#2006)Jean byroot Boussier2023-01-171-1/+1
| * Bump patch version.v3.0.3Samuel Williams2022-12-271-1/+1
| * Fix Regexp deprecated third argument with Regexp::NOENCODING (#1998)Wei Zhe2022-12-271-1/+1
| * Bump patch version.v3.0.2Samuel Williams2022-12-051-1/+1
| * Allow passing through streaming bodies. (#1993)Samuel Williams2022-12-051-1/+6
| * Fix Utils.build_nested_query to URL-encode all query string fields (#1989)Jon Dufresne2022-12-051-3/+3
| * Trim trailing white space throughout the project (#1990)Jon Dufresne2022-12-056-20/+20
| * Fix outdated Rack::Builder rdocs and remove Lobster references (#1986)Kenn Costales2022-12-052-32/+32
| * Bump patch verison.v3.0.1Samuel Williams2022-11-181-1/+1
| * Fix `respond_to?(:each)` with `Rack::Lint` with streaming bodies. (#1981)Samuel Williams2022-11-181-1/+7
| * Do not look for override method if there is no form/parseable data (#1980)James Silberbauer2022-11-181-1/+1
* | `Rack::Request#POST` should consistently raise errors. (#2010)Samuel Williams2023-01-172-19/+29
* | Prefer lowercase "samesite" property name for cookies. (#2008)Samuel Williams2023-01-131-4/+4
* | Fix Rack::Lint error message for HTTP_CONTENT_TYPE and HTTP_CONTENT_LENGTH (#...Jean byroot Boussier2023-01-121-1/+1
* | Rack::MethodOverride handle QueryParser::ParamsTooDeepError (#2006)Jean byroot Boussier2023-01-111-1/+1
View Lorry Controller Status