rest-client 1.8.0.rc1-x64-mingw32 → 1.8.0-x64-mingw32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 080cbd3a97210408b3348c5890b6c18f2317627b
-  data.tar.gz: 643e9f2417da7a64d0bc5b1bf2640869a0954265
+  metadata.gz: 08a122cfb1fffbfdd61a1f9ae580a339bd6cde8f
+  data.tar.gz: b7613f419e6b3b4ddb365f180b748754591d4251
 SHA512:
-  metadata.gz: 1d4f206852637688546887a0bd35d977134002e4dae1d9ab5edc003c316024e2244fdc521a33dea34dd7f9f23e1d1209f5dd1d94bcffcb9646b62989b058123b
-  data.tar.gz: 709ac12e58ee9889d3e5cda11db54061ebda06ca2112e8a2ce02d768b5e2b2dfe244a77b42fa73ffd06bb395d68f5511f229cdfbcb9e1aea867615f18f001e6d
+  metadata.gz: 3cc9baab826a6dab4ddffa811de4f28f4759577533d6b94717bc05bee0752a83ae7ca2d9c6df4177b4c6fc500b248e6e7f82d488a9c55195e14043dff937e8f1
+  data.tar.gz: afcc714aff25abd2a55891c40d86b65aa8b02b4b77ef10cb5974e843dad4b7dee0102b8cfb94d45f2a18614ed899e8743c82b2694c1142b58edbaeb3440256bd

data/history.md

@@ -1,3 +1,15 @@
+# 1.8.0
+
+- Security: implement standards compliant cookie handling by adding a
+  dependency on http-cookie. This breaks compatibility, but was necessary to
+  address a session fixation / cookie disclosure vulnerability.
+  (#369 / CVE-2015-1820)
+
+  Previously, any Set-Cookie headers found in an HTTP 30x response would be
+  sent to the redirection target, regardless of domain. Responses now expose a
+  cookie jar and respect standards compliant domain / path flags in Set-Cookie
+  headers.
+
 # 1.7.3
 
 - Security: redact password in URI from logs (#349 / OSVDB-117461)

data/lib/restclient/version.rb

@@ -1,5 +1,5 @@
 module RestClient
-  VERSION = '1.8.0.rc1' unless defined?(self::VERSION)
+  VERSION = '1.8.0' unless defined?(self::VERSION)
 
   def self.version
     VERSION

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rest-client
 version: !ruby/object:Gem::Version
-  version: 1.8.0.rc1
+  version: 1.8.0
 platform: x64-mingw32
 authors:
 - REST Client Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-23 00:00:00.000000000 Z
+date: 2015-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: webmock
@@ -229,9 +229,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 1.9.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.2.2