From 661a6c5641980b3795bfd2299fee4415549b27f7 Mon Sep 17 00:00:00 2001 From: Bert JW Regeer Date: Sat, 11 Jun 2016 20:33:11 -0600 Subject: Move old CHANGES.txt to HISTORY.txt --- CHANGES.txt | 28 ---------------------------- HISTORY.txt | 37 +++++++++++++++++++++++++++++++++++++ 2 files changed, 37 insertions(+), 28 deletions(-) diff --git a/CHANGES.txt b/CHANGES.txt index ba9ae51..06c0db6 100644 --- a/CHANGES.txt +++ b/CHANGES.txt @@ -1,36 +1,8 @@ -0.9.0 (2016-04-15) ------------------- Deprecations ~~~~~~~~~~~~ -- Python 3.2 is no longer supported by Waitress. -- Python 2.6 will no longer be supported by Waitress in future releases. - -Security/Protections -~~~~~~~~~~~~~~~~~~~~ - -- Building on the changes made in pull request 117, add in checking for line - feed/carriage return HTTP Response Splitting in the status line, as well as - the key of a header. See https://github.com/Pylons/waitress/pull/124 and - https://github.com/Pylons/waitress/issues/122. - -- Waitress will no longer accept headers or status lines with - newline/carriage returns in them, thereby disallowing HTTP Response - Splitting. See https://github.com/Pylons/waitress/issues/117 for - more information, as well as - https://www.owasp.org/index.php/HTTP_Response_Splitting. - -Bugfixes ~~~~~~~~ -- FileBasedBuffer and more important ReadOnlyFileBasedBuffer no longer report - False when tested with bool(), instead always returning True, and becoming - more iterator like. - See: https://github.com/Pylons/waitress/pull/82 and - https://github.com/Pylons/waitress/issues/76 -- Call prune() on the output buffer at the end of a request so that it doesn't - continue to grow without bounds. See - https://github.com/Pylons/waitress/issues/111 for more information. diff --git a/HISTORY.txt b/HISTORY.txt index 176a654..9932582 100644 --- a/HISTORY.txt +++ b/HISTORY.txt @@ -1,3 +1,40 @@ +0.9.0 (2016-04-15) +------------------ + +Deprecations +~~~~~~~~~~~~ + +- Python 3.2 is no longer supported by Waitress. + +- Python 2.6 will no longer be supported by Waitress in future releases. + +Security/Protections +~~~~~~~~~~~~~~~~~~~~ + +- Building on the changes made in pull request 117, add in checking for line + feed/carriage return HTTP Response Splitting in the status line, as well as + the key of a header. See https://github.com/Pylons/waitress/pull/124 and + https://github.com/Pylons/waitress/issues/122. + +- Waitress will no longer accept headers or status lines with + newline/carriage returns in them, thereby disallowing HTTP Response + Splitting. See https://github.com/Pylons/waitress/issues/117 for + more information, as well as + https://www.owasp.org/index.php/HTTP_Response_Splitting. + +Bugfixes +~~~~~~~~ + +- FileBasedBuffer and more important ReadOnlyFileBasedBuffer no longer report + False when tested with bool(), instead always returning True, and becoming + more iterator like. + See: https://github.com/Pylons/waitress/pull/82 and + https://github.com/Pylons/waitress/issues/76 + +- Call prune() on the output buffer at the end of a request so that it doesn't + continue to grow without bounds. See + https://github.com/Pylons/waitress/issues/111 for more information. + 0.8.10 (2015-09-02) ------------------- -- cgit v1.2.1