addressable 2.8.7 → 2.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +71 -46
- data/README.md +6 -6
- data/lib/addressable/idna/pure.rb +4235 -30
- data/lib/addressable/template.rb +13 -2
- data/lib/addressable/uri.rb +1 -1
- data/lib/addressable/version.rb +2 -2
- metadata +6 -46
- data/Gemfile +0 -31
- data/Rakefile +0 -37
- data/addressable.gemspec +0 -28
- data/data/unicode.data +0 -0
- data/spec/addressable/idna_spec.rb +0 -302
- data/spec/addressable/net_http_compat_spec.rb +0 -29
- data/spec/addressable/security_spec.rb +0 -58
- data/spec/addressable/template_spec.rb +0 -1264
- data/spec/addressable/uri_spec.rb +0 -6840
- data/spec/spec_helper.rb +0 -33
- data/tasks/clobber.rake +0 -4
- data/tasks/gem.rake +0 -95
- data/tasks/git.rake +0 -47
- data/tasks/metrics.rake +0 -24
- data/tasks/profile.rake +0 -72
- data/tasks/rspec.rake +0 -23
- data/tasks/yard.rake +0 -29
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: ffaab8b78df30a2126058a425f168d76b26bc33e60849cabc1a6beabae24464d
|
|
4
|
+
data.tar.gz: 841ab2bd18fbcf3ff746cb85ea1661e628e278e6c7bc5ad96cd480e36a54f067
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: f5884313cb2c68ea73d25e8f7f0a76200030bb3fb7abad8b31532180b1ae3c1df10f8db614a273dba115c87860682d227fdf046c743370e020a577cae667d026
|
|
7
|
+
data.tar.gz: c97dd91446991ce20400e9b4c2586aefbc1dca9fd1d49efca9606fc505ff0d49807686ab1fdfd7d4dba447c9c4bf8fb6c0bbd5a1d3d69a4952207d035e912dc2
|
data/CHANGELOG.md
CHANGED
|
@@ -1,14 +1,39 @@
|
|
|
1
|
-
#
|
|
1
|
+
# Changelog
|
|
2
|
+
|
|
3
|
+
## Addressable 2.9.0 <a name="v2.9.0">
|
|
4
|
+
- fixes ReDoS vulnerability in Addressable::Template#match (fixes incomplete
|
|
5
|
+
remediation in 2.8.10)
|
|
6
|
+
|
|
7
|
+
## Addressable 2.8.10 <a name="v2.8.10">
|
|
8
|
+
- fixes ReDoS vulnerability in Addressable::Template#match
|
|
9
|
+
|
|
10
|
+
## Addressable 2.8.9 <a name="v2.8.9">
|
|
11
|
+
- Reduce gem size by excluding test files ([#569])
|
|
12
|
+
- No need for bundler as development dependency ([#571], [5fc1d93](https://github.com/sporkmonger/addressable/commit/5fc1d93))
|
|
13
|
+
- idna/pure: stop building the useless `COMPOSITION_TABLE` (removes the `Addressable::IDNA::COMPOSITION_TABLE` constant) ([#564])
|
|
14
|
+
|
|
15
|
+
[#569]: https://github.com/sporkmonger/addressable/pull/569
|
|
16
|
+
[#571]: https://github.com/sporkmonger/addressable/pull/571
|
|
17
|
+
[#564]: https://github.com/sporkmonger/addressable/pull/564
|
|
18
|
+
|
|
19
|
+
## Addressable 2.8.8 <a name="v2.8.8">
|
|
20
|
+
- Replace the `unicode.data` blob by a ruby constant ([#561])
|
|
21
|
+
- Allow `public_suffix` 7 ([#558])
|
|
22
|
+
|
|
23
|
+
[#561]: https://github.com/sporkmonger/addressable/pull/561
|
|
24
|
+
[#558]: https://github.com/sporkmonger/addressable/pull/558
|
|
25
|
+
|
|
26
|
+
## Addressable 2.8.7 <a name="v2.8.7">
|
|
2
27
|
- Allow `public_suffix` 6 ([#535])
|
|
3
28
|
|
|
4
29
|
[#535]: https://github.com/sporkmonger/addressable/pull/535
|
|
5
30
|
|
|
6
|
-
|
|
31
|
+
## Addressable 2.8.6 <a name="v2.8.6">
|
|
7
32
|
- Memoize regexps for common character classes ([#524])
|
|
8
33
|
|
|
9
34
|
[#524]: https://github.com/sporkmonger/addressable/pull/524
|
|
10
35
|
|
|
11
|
-
|
|
36
|
+
## Addressable 2.8.5 <a name="v2.8.5">
|
|
12
37
|
- Fix thread safety issue with encoding tables ([#515])
|
|
13
38
|
- Define URI::NONE as a module to avoid serialization issues ([#509])
|
|
14
39
|
- Fix YAML serialization ([#508])
|
|
@@ -17,18 +42,18 @@
|
|
|
17
42
|
[#509]: https://github.com/sporkmonger/addressable/pull/509
|
|
18
43
|
[#515]: https://github.com/sporkmonger/addressable/pull/515
|
|
19
44
|
|
|
20
|
-
|
|
45
|
+
## Addressable 2.8.4 <a name="v2.8.4">
|
|
21
46
|
- Restore `Addressable::IDNA.unicode_normalize_kc` as a deprecated method ([#504])
|
|
22
47
|
|
|
23
48
|
[#504]: https://github.com/sporkmonger/addressable/pull/504
|
|
24
49
|
|
|
25
|
-
|
|
50
|
+
## Addressable 2.8.3 <a name="v2.8.3">
|
|
26
51
|
- Fix template expand level 2 hash support for non-string objects ([#499], [#498])
|
|
27
52
|
|
|
28
53
|
[#499]: https://github.com/sporkmonger/addressable/pull/499
|
|
29
54
|
[#498]: https://github.com/sporkmonger/addressable/pull/498
|
|
30
55
|
|
|
31
|
-
|
|
56
|
+
## Addressable 2.8.2 <a name="v2.8.2">
|
|
32
57
|
- Improve cache hits and JIT friendliness ([#486](https://github.com/sporkmonger/addressable/pull/486))
|
|
33
58
|
- Improve code style and test coverage ([#482](https://github.com/sporkmonger/addressable/pull/482))
|
|
34
59
|
- Ensure reset of deferred validation ([#481](https://github.com/sporkmonger/addressable/pull/481))
|
|
@@ -37,7 +62,7 @@
|
|
|
37
62
|
|
|
38
63
|
[#492]: https://github.com/sporkmonger/addressable/pull/492
|
|
39
64
|
|
|
40
|
-
|
|
65
|
+
## Addressable 2.8.1 <a name="v2.8.1">
|
|
41
66
|
- refactor `Addressable::URI.normalize_path` to address linter offenses ([#430](https://github.com/sporkmonger/addressable/pull/430))
|
|
42
67
|
- update gemspec to reflect supported Ruby versions ([#466], [#464], [#463])
|
|
43
68
|
- compatibility w/ public_suffix 5.x ([#466], [#465], [#460])
|
|
@@ -53,7 +78,7 @@
|
|
|
53
78
|
[#465]: https://github.com/sporkmonger/addressable/pull/465
|
|
54
79
|
[#466]: https://github.com/sporkmonger/addressable/pull/466
|
|
55
80
|
|
|
56
|
-
|
|
81
|
+
## Addressable 2.8.0 <a name="v2.8.0">
|
|
57
82
|
- fixes ReDoS vulnerability in Addressable::Template#match
|
|
58
83
|
- no longer replaces `+` with spaces in queries for non-http(s) schemes
|
|
59
84
|
- fixed encoding ipv6 literals
|
|
@@ -65,14 +90,14 @@
|
|
|
65
90
|
- performance improvements
|
|
66
91
|
- switch CI/CD to GitHub Actions
|
|
67
92
|
|
|
68
|
-
|
|
93
|
+
## Addressable 2.7.0 <a name="v2.7.0">
|
|
69
94
|
- added `:compacted` flag to `normalized_query`
|
|
70
95
|
- `heuristic_parse` handles `mailto:` more intuitively
|
|
71
96
|
- dropped explicit support for JRuby 9.0.5.0
|
|
72
97
|
- compatibility w/ public_suffix 4.x
|
|
73
98
|
- performance improvements
|
|
74
99
|
|
|
75
|
-
|
|
100
|
+
## Addressable 2.6.0 <a name="v2.6.0">
|
|
76
101
|
- added `tld=` method to allow assignment to the public suffix
|
|
77
102
|
- most `heuristic_parse` patterns are now case-insensitive
|
|
78
103
|
- `heuristic_parse` handles more `file://` URI variations
|
|
@@ -83,17 +108,17 @@
|
|
|
83
108
|
- minor performance improvements in regexps
|
|
84
109
|
- fixes to eliminate warnings
|
|
85
110
|
|
|
86
|
-
|
|
111
|
+
## Addressable 2.5.2 <a name="v2.5.2">
|
|
87
112
|
- better support for frozen string literals
|
|
88
113
|
- fixed bug w/ uppercase characters in scheme
|
|
89
114
|
- IDNA errors w/ emoji URLs
|
|
90
115
|
- compatibility w/ public_suffix 3.x
|
|
91
116
|
|
|
92
|
-
|
|
117
|
+
## Addressable 2.5.1 <a name="v2.5.1">
|
|
93
118
|
- allow unicode normalization to be disabled for URI Template expansion
|
|
94
119
|
- removed duplicate test
|
|
95
120
|
|
|
96
|
-
|
|
121
|
+
## Addressable 2.5.0 <a name="v2.5.0">
|
|
97
122
|
- dropping support for Ruby 1.9
|
|
98
123
|
- adding support for Ruby 2.4 preview
|
|
99
124
|
- add support for public suffixes and tld; first runtime dependency
|
|
@@ -107,7 +132,7 @@
|
|
|
107
132
|
- host parts longer than 63 bytes will be ignored and not passed to libidn
|
|
108
133
|
- normalized values always encoded as UTF-8
|
|
109
134
|
|
|
110
|
-
|
|
135
|
+
## Addressable 2.4.0 <a name="v2.4.0">
|
|
111
136
|
- support for 1.8.x dropped
|
|
112
137
|
- double quotes in a host now raises an error
|
|
113
138
|
- newlines in host will no longer get unescaped during normalization
|
|
@@ -119,17 +144,17 @@
|
|
|
119
144
|
- fixed minor bug where an exception would be thrown for a missing ACE suffix
|
|
120
145
|
- better partial expansion of URI templates
|
|
121
146
|
|
|
122
|
-
|
|
147
|
+
## Addressable 2.3.8 <a name="v2.3.8">
|
|
123
148
|
- fix warnings
|
|
124
149
|
- update dependency gems
|
|
125
150
|
- support for 1.8.x officially deprecated
|
|
126
151
|
|
|
127
|
-
|
|
152
|
+
## Addressable 2.3.7 <a name="v2.3.7">
|
|
128
153
|
- fix scenario in which invalid URIs don't get an exception until inspected
|
|
129
154
|
- handle hostnames with two adjacent periods correctly
|
|
130
155
|
- upgrade of RSpec
|
|
131
156
|
|
|
132
|
-
|
|
157
|
+
## Addressable 2.3.6 <a name="v2.3.6">
|
|
133
158
|
- normalization drops empty query string
|
|
134
159
|
- better handling in template extract for missing values
|
|
135
160
|
- template modifier for `'?'` now treated as optional
|
|
@@ -138,19 +163,19 @@
|
|
|
138
163
|
- added `:sorted` option to normalization of query strings
|
|
139
164
|
- fixed issue with normalization of hosts given in `'example.com.'` form
|
|
140
165
|
|
|
141
|
-
|
|
166
|
+
## Addressable 2.3.5 <a name="v2.3.5">
|
|
142
167
|
- added Addressable::URI#empty? method
|
|
143
168
|
- Addressable::URI#hostname methods now strip square brackets from IPv6 hosts
|
|
144
169
|
- compatibility with Net::HTTP in Ruby 2.0.0
|
|
145
170
|
- Addressable::URI#route_from should always give relative URIs
|
|
146
171
|
|
|
147
|
-
|
|
172
|
+
## Addressable 2.3.4 <a name="v2.3.4">
|
|
148
173
|
- fixed issue with encoding altering its inputs
|
|
149
174
|
- query string normalization now leaves ';' characters alone
|
|
150
175
|
- FakeFS is detected before attempting to load unicode tables
|
|
151
176
|
- additional testing to ensure frozen objects don't cause problems
|
|
152
177
|
|
|
153
|
-
|
|
178
|
+
## Addressable 2.3.3 <a name="v2.3.3">
|
|
154
179
|
- fixed issue with converting common primitives during template expansion
|
|
155
180
|
- fixed port encoding issue
|
|
156
181
|
- removed a few warnings
|
|
@@ -159,59 +184,59 @@
|
|
|
159
184
|
- no template match should now result in nil instead of an empty MatchData
|
|
160
185
|
- added license information to gemspec
|
|
161
186
|
|
|
162
|
-
|
|
187
|
+
## Addressable 2.3.2 <a name="v2.3.2">
|
|
163
188
|
- added Addressable::URI#default_port method
|
|
164
189
|
- fixed issue with Marshalling Unicode data on Windows
|
|
165
190
|
- improved heuristic parsing to better handle IPv4 addresses
|
|
166
191
|
|
|
167
|
-
|
|
192
|
+
## Addressable 2.3.1 <a name="v2.3.1">
|
|
168
193
|
- fixed missing unicode data file
|
|
169
194
|
|
|
170
|
-
|
|
195
|
+
## Addressable 2.3.0 <a name="v2.3.0">
|
|
171
196
|
- updated Addressable::Template to use RFC 6570, level 4
|
|
172
197
|
- fixed compatibility problems with some versions of Ruby
|
|
173
198
|
- moved unicode tables into a data file for performance reasons
|
|
174
199
|
- removing support for multiple query value notations
|
|
175
200
|
|
|
176
|
-
|
|
201
|
+
## Addressable 2.2.8 <a name="v2.2.8">
|
|
177
202
|
- fixed issues with dot segment removal code
|
|
178
203
|
- form encoding can now handle multiple values per key
|
|
179
204
|
- updated development environment
|
|
180
205
|
|
|
181
|
-
|
|
206
|
+
## Addressable 2.2.7 <a name="v2.2.7">
|
|
182
207
|
- fixed issues related to Addressable::URI#query_values=
|
|
183
208
|
- the Addressable::URI.parse method is now polymorphic
|
|
184
209
|
|
|
185
|
-
|
|
210
|
+
## Addressable 2.2.6 <a name="v2.2.6">
|
|
186
211
|
- changed the way ambiguous paths are handled
|
|
187
212
|
- fixed bug with frozen URIs
|
|
188
213
|
- https supported in heuristic parsing
|
|
189
214
|
|
|
190
|
-
|
|
215
|
+
## Addressable 2.2.5 <a name="v2.2.5">
|
|
191
216
|
- 'parsing' a pre-parsed URI object is now a dup operation
|
|
192
217
|
- introduced conditional support for libidn
|
|
193
218
|
- fixed normalization issue on ampersands in query strings
|
|
194
219
|
- added additional tests around handling of query strings
|
|
195
220
|
|
|
196
|
-
|
|
221
|
+
## Addressable 2.2.4 <a name="v2.2.4">
|
|
197
222
|
- added origin support from draft-ietf-websec-origin-00
|
|
198
223
|
- resolved issue with attempting to navigate below root
|
|
199
224
|
- fixed bug with string splitting in query strings
|
|
200
225
|
|
|
201
|
-
|
|
226
|
+
## Addressable 2.2.3 <a name="v2.2.3">
|
|
202
227
|
- added :flat_array notation for query strings
|
|
203
228
|
|
|
204
|
-
|
|
229
|
+
## Addressable 2.2.2 <a name="v2.2.2">
|
|
205
230
|
- fixed issue with percent escaping of '+' character in query strings
|
|
206
231
|
|
|
207
|
-
|
|
232
|
+
## Addressable 2.2.1 <a name="v2.2.1">
|
|
208
233
|
- added support for application/x-www-form-urlencoded.
|
|
209
234
|
|
|
210
|
-
|
|
235
|
+
## Addressable 2.2.0 <a name="v2.2.0">
|
|
211
236
|
- added site methods
|
|
212
237
|
- improved documentation
|
|
213
238
|
|
|
214
|
-
|
|
239
|
+
## Addressable 2.1.2 <a name="v2.1.2">
|
|
215
240
|
- added HTTP request URI methods
|
|
216
241
|
- better handling of Windows file paths
|
|
217
242
|
- validation_deferred boolean replaced with defer_validation block
|
|
@@ -219,14 +244,14 @@
|
|
|
219
244
|
- fixed issue with constructing URIs with relative paths
|
|
220
245
|
- fixed warnings
|
|
221
246
|
|
|
222
|
-
|
|
247
|
+
## Addressable 2.1.1 <a name="v2.1.1">
|
|
223
248
|
- more type checking changes
|
|
224
249
|
- fixed issue with unicode normalization
|
|
225
250
|
- added method to find template defaults
|
|
226
251
|
- symbolic keys are now allowed in template mappings
|
|
227
252
|
- numeric values and symbolic values are now allowed in template mappings
|
|
228
253
|
|
|
229
|
-
|
|
254
|
+
## Addressable 2.1.0 <a name="v2.1.0x">
|
|
230
255
|
- refactored URI template support out into its own class
|
|
231
256
|
- removed extract method due to being useless and unreliable
|
|
232
257
|
- removed Addressable::URI.expand_template
|
|
@@ -240,15 +265,15 @@
|
|
|
240
265
|
- worked around issue with freezing URIs
|
|
241
266
|
- improved specs
|
|
242
267
|
|
|
243
|
-
|
|
268
|
+
## Addressable 2.0.2 <a name="v2.0.2">
|
|
244
269
|
- fixed issue with URI template expansion
|
|
245
270
|
- fixed issue with percent escaping characters 0-15
|
|
246
271
|
|
|
247
|
-
|
|
272
|
+
## Addressable 2.0.1 <a name="v2.0.1">
|
|
248
273
|
- fixed issue with query string assignment
|
|
249
274
|
- fixed issue with improperly encoded components
|
|
250
275
|
|
|
251
|
-
|
|
276
|
+
## Addressable 2.0.0 <a name="v2.0.0">
|
|
252
277
|
- the initialize method now takes an options hash as its only parameter
|
|
253
278
|
- added query_values method to URI class
|
|
254
279
|
- completely replaced IDNA implementation with pure Ruby
|
|
@@ -263,20 +288,20 @@
|
|
|
263
288
|
- updated URI Template code to match v 03 of the draft spec
|
|
264
289
|
- added a bunch of new specifications
|
|
265
290
|
|
|
266
|
-
|
|
291
|
+
## Addressable 1.0.4 <a name="v1.0.4">
|
|
267
292
|
- switched to using RSpec's pending system for specs that rely on IDN
|
|
268
293
|
- fixed issue with creating URIs with paths that are not prefixed with '/'
|
|
269
294
|
|
|
270
|
-
|
|
295
|
+
## Addressable 1.0.3 <a name="v1.0.3">
|
|
271
296
|
- implemented a hash method
|
|
272
297
|
|
|
273
|
-
|
|
298
|
+
## Addressable 1.0.2 <a name="v1.0.2">
|
|
274
299
|
- fixed minor bug with the extract_mapping method
|
|
275
300
|
|
|
276
|
-
|
|
301
|
+
## Addressable 1.0.1 <a name="v1.0.1">
|
|
277
302
|
- fixed minor bug with the extract_mapping method
|
|
278
303
|
|
|
279
|
-
|
|
304
|
+
## Addressable 1.0.0 <a name="v1.0.0">
|
|
280
305
|
- heuristic parse method added
|
|
281
306
|
- parsing is slightly more strict
|
|
282
307
|
- replaced to_h with to_hash
|
|
@@ -285,16 +310,16 @@
|
|
|
285
310
|
- improved heckle rake task
|
|
286
311
|
- no surviving heckle mutations
|
|
287
312
|
|
|
288
|
-
|
|
313
|
+
## Addressable 0.1.2 <a name="v0.1.2">
|
|
289
314
|
- improved normalization
|
|
290
315
|
- fixed bug in joining algorithm
|
|
291
316
|
- updated specifications
|
|
292
317
|
|
|
293
|
-
|
|
318
|
+
## Addressable 0.1.1 <a name="v0.1.1">
|
|
294
319
|
- updated documentation
|
|
295
320
|
- added URI Template variable extraction
|
|
296
321
|
|
|
297
|
-
|
|
322
|
+
## Addressable 0.1.0 <a name="v0.1.0">
|
|
298
323
|
- initial release
|
|
299
324
|
- implementation based on RFC 3986, 3987
|
|
300
325
|
- support for IRIs via libidn
|
data/README.md
CHANGED
|
@@ -17,7 +17,7 @@
|
|
|
17
17
|
[coveralls]: https://coveralls.io/r/sporkmonger/addressable
|
|
18
18
|
[inch]: https://inch-ci.org/github/sporkmonger/addressable
|
|
19
19
|
|
|
20
|
-
|
|
20
|
+
## Description
|
|
21
21
|
|
|
22
22
|
Addressable is an alternative implementation to the URI implementation
|
|
23
23
|
that is part of Ruby's standard library. It is flexible, offers heuristic
|
|
@@ -25,12 +25,12 @@ parsing, and additionally provides extensive support for IRIs and URI templates.
|
|
|
25
25
|
|
|
26
26
|
Addressable closely conforms to RFC 3986, RFC 3987, and RFC 6570 (level 4).
|
|
27
27
|
|
|
28
|
-
|
|
28
|
+
## Reference
|
|
29
29
|
|
|
30
30
|
- {Addressable::URI}
|
|
31
31
|
- {Addressable::Template}
|
|
32
32
|
|
|
33
|
-
|
|
33
|
+
## Example usage
|
|
34
34
|
|
|
35
35
|
```ruby
|
|
36
36
|
require "addressable/uri"
|
|
@@ -49,7 +49,7 @@ uri.normalize
|
|
|
49
49
|
```
|
|
50
50
|
|
|
51
51
|
|
|
52
|
-
|
|
52
|
+
## URI Templates
|
|
53
53
|
|
|
54
54
|
For more details, see [RFC 6570](https://www.rfc-editor.org/rfc/rfc6570.txt).
|
|
55
55
|
|
|
@@ -88,7 +88,7 @@ template.extract(uri)
|
|
|
88
88
|
# }
|
|
89
89
|
```
|
|
90
90
|
|
|
91
|
-
|
|
91
|
+
## Install
|
|
92
92
|
|
|
93
93
|
```console
|
|
94
94
|
$ gem install addressable
|
|
@@ -103,7 +103,7 @@ $ brew install libidn # OS X
|
|
|
103
103
|
$ gem install idn-ruby
|
|
104
104
|
```
|
|
105
105
|
|
|
106
|
-
|
|
106
|
+
## Semantic Versioning
|
|
107
107
|
|
|
108
108
|
This project uses [Semantic Versioning](https://semver.org/). You can (and should) specify your
|
|
109
109
|
dependency using a pessimistic version constraint covering the major and minor
|