addressable 2.8.6 → 2.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 4023555b4bb6c374726bb9647a29d30943c637115619670a09632fe7a4e28765
4
- data.tar.gz: 95ad31a9e1dd01f2bc9a7c097eb452f07ed52be16dcd2ad4946652648dd7808c
3
+ metadata.gz: ffaab8b78df30a2126058a425f168d76b26bc33e60849cabc1a6beabae24464d
4
+ data.tar.gz: 841ab2bd18fbcf3ff746cb85ea1661e628e278e6c7bc5ad96cd480e36a54f067
5
5
  SHA512:
6
- metadata.gz: d7dd6eed173bc4a06a3abb74f6fdbf501ee12b3fcb2828c0f21db98d1779175bce4dc900999269db24cc8647c3148b06cf1d9c768c97c7591a48f1e43751bb7b
7
- data.tar.gz: 3bbe976f23a4c3a6776a44d6ff2147b9ab87418162af57b2f278089528416eb3d564b114f96f165946d9126ee68d5da86c0ac01a9e2fa2792547bb312f40f046
6
+ metadata.gz: f5884313cb2c68ea73d25e8f7f0a76200030bb3fb7abad8b31532180b1ae3c1df10f8db614a273dba115c87860682d227fdf046c743370e020a577cae667d026
7
+ data.tar.gz: c97dd91446991ce20400e9b4c2586aefbc1dca9fd1d49efca9606fc505ff0d49807686ab1fdfd7d4dba447c9c4bf8fb6c0bbd5a1d3d69a4952207d035e912dc2
data/CHANGELOG.md CHANGED
@@ -1,9 +1,39 @@
1
- # Addressable 2.8.6 <a name="v2.8.6">
1
+ # Changelog
2
+
3
+ ## Addressable 2.9.0 <a name="v2.9.0">
4
+ - fixes ReDoS vulnerability in Addressable::Template#match (fixes incomplete
5
+ remediation in 2.8.10)
6
+
7
+ ## Addressable 2.8.10 <a name="v2.8.10">
8
+ - fixes ReDoS vulnerability in Addressable::Template#match
9
+
10
+ ## Addressable 2.8.9 <a name="v2.8.9">
11
+ - Reduce gem size by excluding test files ([#569])
12
+ - No need for bundler as development dependency ([#571], [5fc1d93](https://github.com/sporkmonger/addressable/commit/5fc1d93))
13
+ - idna/pure: stop building the useless `COMPOSITION_TABLE` (removes the `Addressable::IDNA::COMPOSITION_TABLE` constant) ([#564])
14
+
15
+ [#569]: https://github.com/sporkmonger/addressable/pull/569
16
+ [#571]: https://github.com/sporkmonger/addressable/pull/571
17
+ [#564]: https://github.com/sporkmonger/addressable/pull/564
18
+
19
+ ## Addressable 2.8.8 <a name="v2.8.8">
20
+ - Replace the `unicode.data` blob by a ruby constant ([#561])
21
+ - Allow `public_suffix` 7 ([#558])
22
+
23
+ [#561]: https://github.com/sporkmonger/addressable/pull/561
24
+ [#558]: https://github.com/sporkmonger/addressable/pull/558
25
+
26
+ ## Addressable 2.8.7 <a name="v2.8.7">
27
+ - Allow `public_suffix` 6 ([#535])
28
+
29
+ [#535]: https://github.com/sporkmonger/addressable/pull/535
30
+
31
+ ## Addressable 2.8.6 <a name="v2.8.6">
2
32
  - Memoize regexps for common character classes ([#524])
3
33
 
4
34
  [#524]: https://github.com/sporkmonger/addressable/pull/524
5
35
 
6
- # Addressable 2.8.5 <a name="v2.8.5">
36
+ ## Addressable 2.8.5 <a name="v2.8.5">
7
37
  - Fix thread safety issue with encoding tables ([#515])
8
38
  - Define URI::NONE as a module to avoid serialization issues ([#509])
9
39
  - Fix YAML serialization ([#508])
@@ -12,18 +42,18 @@
12
42
  [#509]: https://github.com/sporkmonger/addressable/pull/509
13
43
  [#515]: https://github.com/sporkmonger/addressable/pull/515
14
44
 
15
- # Addressable 2.8.4 <a name="v2.8.4">
45
+ ## Addressable 2.8.4 <a name="v2.8.4">
16
46
  - Restore `Addressable::IDNA.unicode_normalize_kc` as a deprecated method ([#504])
17
47
 
18
48
  [#504]: https://github.com/sporkmonger/addressable/pull/504
19
49
 
20
- # Addressable 2.8.3 <a name="v2.8.3">
50
+ ## Addressable 2.8.3 <a name="v2.8.3">
21
51
  - Fix template expand level 2 hash support for non-string objects ([#499], [#498])
22
52
 
23
53
  [#499]: https://github.com/sporkmonger/addressable/pull/499
24
54
  [#498]: https://github.com/sporkmonger/addressable/pull/498
25
55
 
26
- # Addressable 2.8.2 <a name="v2.8.2">
56
+ ## Addressable 2.8.2 <a name="v2.8.2">
27
57
  - Improve cache hits and JIT friendliness ([#486](https://github.com/sporkmonger/addressable/pull/486))
28
58
  - Improve code style and test coverage ([#482](https://github.com/sporkmonger/addressable/pull/482))
29
59
  - Ensure reset of deferred validation ([#481](https://github.com/sporkmonger/addressable/pull/481))
@@ -32,7 +62,7 @@
32
62
 
33
63
  [#492]: https://github.com/sporkmonger/addressable/pull/492
34
64
 
35
- # Addressable 2.8.1 <a name="v2.8.1">
65
+ ## Addressable 2.8.1 <a name="v2.8.1">
36
66
  - refactor `Addressable::URI.normalize_path` to address linter offenses ([#430](https://github.com/sporkmonger/addressable/pull/430))
37
67
  - update gemspec to reflect supported Ruby versions ([#466], [#464], [#463])
38
68
  - compatibility w/ public_suffix 5.x ([#466], [#465], [#460])
@@ -48,7 +78,7 @@
48
78
  [#465]: https://github.com/sporkmonger/addressable/pull/465
49
79
  [#466]: https://github.com/sporkmonger/addressable/pull/466
50
80
 
51
- # Addressable 2.8.0 <a name="v2.8.0">
81
+ ## Addressable 2.8.0 <a name="v2.8.0">
52
82
  - fixes ReDoS vulnerability in Addressable::Template#match
53
83
  - no longer replaces `+` with spaces in queries for non-http(s) schemes
54
84
  - fixed encoding ipv6 literals
@@ -60,14 +90,14 @@
60
90
  - performance improvements
61
91
  - switch CI/CD to GitHub Actions
62
92
 
63
- # Addressable 2.7.0 <a name="v2.7.0">
93
+ ## Addressable 2.7.0 <a name="v2.7.0">
64
94
  - added `:compacted` flag to `normalized_query`
65
95
  - `heuristic_parse` handles `mailto:` more intuitively
66
96
  - dropped explicit support for JRuby 9.0.5.0
67
97
  - compatibility w/ public_suffix 4.x
68
98
  - performance improvements
69
99
 
70
- # Addressable 2.6.0 <a name="v2.6.0">
100
+ ## Addressable 2.6.0 <a name="v2.6.0">
71
101
  - added `tld=` method to allow assignment to the public suffix
72
102
  - most `heuristic_parse` patterns are now case-insensitive
73
103
  - `heuristic_parse` handles more `file://` URI variations
@@ -78,17 +108,17 @@
78
108
  - minor performance improvements in regexps
79
109
  - fixes to eliminate warnings
80
110
 
81
- # Addressable 2.5.2 <a name="v2.5.2">
111
+ ## Addressable 2.5.2 <a name="v2.5.2">
82
112
  - better support for frozen string literals
83
113
  - fixed bug w/ uppercase characters in scheme
84
114
  - IDNA errors w/ emoji URLs
85
115
  - compatibility w/ public_suffix 3.x
86
116
 
87
- # Addressable 2.5.1 <a name="v2.5.1">
117
+ ## Addressable 2.5.1 <a name="v2.5.1">
88
118
  - allow unicode normalization to be disabled for URI Template expansion
89
119
  - removed duplicate test
90
120
 
91
- # Addressable 2.5.0 <a name="v2.5.0">
121
+ ## Addressable 2.5.0 <a name="v2.5.0">
92
122
  - dropping support for Ruby 1.9
93
123
  - adding support for Ruby 2.4 preview
94
124
  - add support for public suffixes and tld; first runtime dependency
@@ -102,7 +132,7 @@
102
132
  - host parts longer than 63 bytes will be ignored and not passed to libidn
103
133
  - normalized values always encoded as UTF-8
104
134
 
105
- # Addressable 2.4.0 <a name="v2.4.0">
135
+ ## Addressable 2.4.0 <a name="v2.4.0">
106
136
  - support for 1.8.x dropped
107
137
  - double quotes in a host now raises an error
108
138
  - newlines in host will no longer get unescaped during normalization
@@ -114,17 +144,17 @@
114
144
  - fixed minor bug where an exception would be thrown for a missing ACE suffix
115
145
  - better partial expansion of URI templates
116
146
 
117
- # Addressable 2.3.8 <a name="v2.3.8">
147
+ ## Addressable 2.3.8 <a name="v2.3.8">
118
148
  - fix warnings
119
149
  - update dependency gems
120
150
  - support for 1.8.x officially deprecated
121
151
 
122
- # Addressable 2.3.7 <a name="v2.3.7">
152
+ ## Addressable 2.3.7 <a name="v2.3.7">
123
153
  - fix scenario in which invalid URIs don't get an exception until inspected
124
154
  - handle hostnames with two adjacent periods correctly
125
155
  - upgrade of RSpec
126
156
 
127
- # Addressable 2.3.6 <a name="v2.3.6">
157
+ ## Addressable 2.3.6 <a name="v2.3.6">
128
158
  - normalization drops empty query string
129
159
  - better handling in template extract for missing values
130
160
  - template modifier for `'?'` now treated as optional
@@ -133,19 +163,19 @@
133
163
  - added `:sorted` option to normalization of query strings
134
164
  - fixed issue with normalization of hosts given in `'example.com.'` form
135
165
 
136
- # Addressable 2.3.5 <a name="v2.3.5">
166
+ ## Addressable 2.3.5 <a name="v2.3.5">
137
167
  - added Addressable::URI#empty? method
138
168
  - Addressable::URI#hostname methods now strip square brackets from IPv6 hosts
139
169
  - compatibility with Net::HTTP in Ruby 2.0.0
140
170
  - Addressable::URI#route_from should always give relative URIs
141
171
 
142
- # Addressable 2.3.4 <a name="v2.3.4">
172
+ ## Addressable 2.3.4 <a name="v2.3.4">
143
173
  - fixed issue with encoding altering its inputs
144
174
  - query string normalization now leaves ';' characters alone
145
175
  - FakeFS is detected before attempting to load unicode tables
146
176
  - additional testing to ensure frozen objects don't cause problems
147
177
 
148
- # Addressable 2.3.3 <a name="v2.3.3">
178
+ ## Addressable 2.3.3 <a name="v2.3.3">
149
179
  - fixed issue with converting common primitives during template expansion
150
180
  - fixed port encoding issue
151
181
  - removed a few warnings
@@ -154,59 +184,59 @@
154
184
  - no template match should now result in nil instead of an empty MatchData
155
185
  - added license information to gemspec
156
186
 
157
- # Addressable 2.3.2 <a name="v2.3.2">
187
+ ## Addressable 2.3.2 <a name="v2.3.2">
158
188
  - added Addressable::URI#default_port method
159
189
  - fixed issue with Marshalling Unicode data on Windows
160
190
  - improved heuristic parsing to better handle IPv4 addresses
161
191
 
162
- # Addressable 2.3.1 <a name="v2.3.1">
192
+ ## Addressable 2.3.1 <a name="v2.3.1">
163
193
  - fixed missing unicode data file
164
194
 
165
- # Addressable 2.3.0 <a name="v2.3.0">
195
+ ## Addressable 2.3.0 <a name="v2.3.0">
166
196
  - updated Addressable::Template to use RFC 6570, level 4
167
197
  - fixed compatibility problems with some versions of Ruby
168
198
  - moved unicode tables into a data file for performance reasons
169
199
  - removing support for multiple query value notations
170
200
 
171
- # Addressable 2.2.8 <a name="v2.2.8">
201
+ ## Addressable 2.2.8 <a name="v2.2.8">
172
202
  - fixed issues with dot segment removal code
173
203
  - form encoding can now handle multiple values per key
174
204
  - updated development environment
175
205
 
176
- # Addressable 2.2.7 <a name="v2.2.7">
206
+ ## Addressable 2.2.7 <a name="v2.2.7">
177
207
  - fixed issues related to Addressable::URI#query_values=
178
208
  - the Addressable::URI.parse method is now polymorphic
179
209
 
180
- # Addressable 2.2.6 <a name="v2.2.6">
210
+ ## Addressable 2.2.6 <a name="v2.2.6">
181
211
  - changed the way ambiguous paths are handled
182
212
  - fixed bug with frozen URIs
183
213
  - https supported in heuristic parsing
184
214
 
185
- # Addressable 2.2.5 <a name="v2.2.5">
215
+ ## Addressable 2.2.5 <a name="v2.2.5">
186
216
  - 'parsing' a pre-parsed URI object is now a dup operation
187
217
  - introduced conditional support for libidn
188
218
  - fixed normalization issue on ampersands in query strings
189
219
  - added additional tests around handling of query strings
190
220
 
191
- # Addressable 2.2.4 <a name="v2.2.4">
221
+ ## Addressable 2.2.4 <a name="v2.2.4">
192
222
  - added origin support from draft-ietf-websec-origin-00
193
223
  - resolved issue with attempting to navigate below root
194
224
  - fixed bug with string splitting in query strings
195
225
 
196
- # Addressable 2.2.3 <a name="v2.2.3">
226
+ ## Addressable 2.2.3 <a name="v2.2.3">
197
227
  - added :flat_array notation for query strings
198
228
 
199
- # Addressable 2.2.2 <a name="v2.2.2">
229
+ ## Addressable 2.2.2 <a name="v2.2.2">
200
230
  - fixed issue with percent escaping of '+' character in query strings
201
231
 
202
- # Addressable 2.2.1 <a name="v2.2.1">
232
+ ## Addressable 2.2.1 <a name="v2.2.1">
203
233
  - added support for application/x-www-form-urlencoded.
204
234
 
205
- # Addressable 2.2.0 <a name="v2.2.0">
235
+ ## Addressable 2.2.0 <a name="v2.2.0">
206
236
  - added site methods
207
237
  - improved documentation
208
238
 
209
- # Addressable 2.1.2 <a name="v2.1.2">
239
+ ## Addressable 2.1.2 <a name="v2.1.2">
210
240
  - added HTTP request URI methods
211
241
  - better handling of Windows file paths
212
242
  - validation_deferred boolean replaced with defer_validation block
@@ -214,14 +244,14 @@
214
244
  - fixed issue with constructing URIs with relative paths
215
245
  - fixed warnings
216
246
 
217
- # Addressable 2.1.1 <a name="v2.1.1">
247
+ ## Addressable 2.1.1 <a name="v2.1.1">
218
248
  - more type checking changes
219
249
  - fixed issue with unicode normalization
220
250
  - added method to find template defaults
221
251
  - symbolic keys are now allowed in template mappings
222
252
  - numeric values and symbolic values are now allowed in template mappings
223
253
 
224
- # Addressable 2.1.0 <a name="v2.1.0">
254
+ ## Addressable 2.1.0 <a name="v2.1.0x">
225
255
  - refactored URI template support out into its own class
226
256
  - removed extract method due to being useless and unreliable
227
257
  - removed Addressable::URI.expand_template
@@ -235,15 +265,15 @@
235
265
  - worked around issue with freezing URIs
236
266
  - improved specs
237
267
 
238
- # Addressable 2.0.2 <a name="v2.0.2">
268
+ ## Addressable 2.0.2 <a name="v2.0.2">
239
269
  - fixed issue with URI template expansion
240
270
  - fixed issue with percent escaping characters 0-15
241
271
 
242
- # Addressable 2.0.1 <a name="v2.0.1">
272
+ ## Addressable 2.0.1 <a name="v2.0.1">
243
273
  - fixed issue with query string assignment
244
274
  - fixed issue with improperly encoded components
245
275
 
246
- # Addressable 2.0.0 <a name="v2.0.0">
276
+ ## Addressable 2.0.0 <a name="v2.0.0">
247
277
  - the initialize method now takes an options hash as its only parameter
248
278
  - added query_values method to URI class
249
279
  - completely replaced IDNA implementation with pure Ruby
@@ -258,20 +288,20 @@
258
288
  - updated URI Template code to match v 03 of the draft spec
259
289
  - added a bunch of new specifications
260
290
 
261
- # Addressable 1.0.4 <a name="v1.0.4">
291
+ ## Addressable 1.0.4 <a name="v1.0.4">
262
292
  - switched to using RSpec's pending system for specs that rely on IDN
263
293
  - fixed issue with creating URIs with paths that are not prefixed with '/'
264
294
 
265
- # Addressable 1.0.3 <a name="v1.0.3">
295
+ ## Addressable 1.0.3 <a name="v1.0.3">
266
296
  - implemented a hash method
267
297
 
268
- # Addressable 1.0.2 <a name="v1.0.2">
298
+ ## Addressable 1.0.2 <a name="v1.0.2">
269
299
  - fixed minor bug with the extract_mapping method
270
300
 
271
- # Addressable 1.0.1 <a name="v1.0.1">
301
+ ## Addressable 1.0.1 <a name="v1.0.1">
272
302
  - fixed minor bug with the extract_mapping method
273
303
 
274
- # Addressable 1.0.0 <a name="v1.0.0">
304
+ ## Addressable 1.0.0 <a name="v1.0.0">
275
305
  - heuristic parse method added
276
306
  - parsing is slightly more strict
277
307
  - replaced to_h with to_hash
@@ -280,16 +310,16 @@
280
310
  - improved heckle rake task
281
311
  - no surviving heckle mutations
282
312
 
283
- # Addressable 0.1.2 <a name="v0.1.2">
313
+ ## Addressable 0.1.2 <a name="v0.1.2">
284
314
  - improved normalization
285
315
  - fixed bug in joining algorithm
286
316
  - updated specifications
287
317
 
288
- # Addressable 0.1.1 <a name="v0.1.1">
318
+ ## Addressable 0.1.1 <a name="v0.1.1">
289
319
  - updated documentation
290
320
  - added URI Template variable extraction
291
321
 
292
- # Addressable 0.1.0 <a name="v0.1.0">
322
+ ## Addressable 0.1.0 <a name="v0.1.0">
293
323
  - initial release
294
324
  - implementation based on RFC 3986, 3987
295
325
  - support for IRIs via libidn
data/README.md CHANGED
@@ -17,7 +17,7 @@
17
17
  [coveralls]: https://coveralls.io/r/sporkmonger/addressable
18
18
  [inch]: https://inch-ci.org/github/sporkmonger/addressable
19
19
 
20
- # Description
20
+ ## Description
21
21
 
22
22
  Addressable is an alternative implementation to the URI implementation
23
23
  that is part of Ruby's standard library. It is flexible, offers heuristic
@@ -25,12 +25,12 @@ parsing, and additionally provides extensive support for IRIs and URI templates.
25
25
 
26
26
  Addressable closely conforms to RFC 3986, RFC 3987, and RFC 6570 (level 4).
27
27
 
28
- # Reference
28
+ ## Reference
29
29
 
30
30
  - {Addressable::URI}
31
31
  - {Addressable::Template}
32
32
 
33
- # Example usage
33
+ ## Example usage
34
34
 
35
35
  ```ruby
36
36
  require "addressable/uri"
@@ -49,7 +49,7 @@ uri.normalize
49
49
  ```
50
50
 
51
51
 
52
- # URI Templates
52
+ ## URI Templates
53
53
 
54
54
  For more details, see [RFC 6570](https://www.rfc-editor.org/rfc/rfc6570.txt).
55
55
 
@@ -88,7 +88,7 @@ template.extract(uri)
88
88
  # }
89
89
  ```
90
90
 
91
- # Install
91
+ ## Install
92
92
 
93
93
  ```console
94
94
  $ gem install addressable
@@ -103,7 +103,7 @@ $ brew install libidn # OS X
103
103
  $ gem install idn-ruby
104
104
  ```
105
105
 
106
- # Semantic Versioning
106
+ ## Semantic Versioning
107
107
 
108
108
  This project uses [Semantic Versioning](https://semver.org/). You can (and should) specify your
109
109
  dependency using a pessimistic version constraint covering the major and minor