rest-client 1.8.0.rc1 → 1.8.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 419720d1763901902f6efe24e29884563f8cc6c8
-  data.tar.gz: 70b0abae33d0974fe015314b892759d40d882eea
+  metadata.gz: 683937d317980acfcfcfbc94eb76f2566ed3bf92
+  data.tar.gz: fa2f669653292404bc814fb436c17755060a75a6
 SHA512:
-  metadata.gz: 8974511fde1bd1c91ac376c402eb74bc4934c067036877a88804e375a9a2ee837ee66f78ec5d4b9518e7aae8cda198e4ae04ebc1a6fbb44b32036d70b3d4ba33
-  data.tar.gz: cd594fe5b477132e1430c7bfd96fadbd44c0cf379c048dec4e7de8eee283da86baab278678e32e3d9c16d54a733ba37d056b72025063e4cb558bd03b739cac50
+  metadata.gz: c57e29fbfe2e0bb92cf1556e38438171c04739dc6499098c651021c3e797e7724aa12b70f552d4ad43fe78f7e30d20eeea4b94e29dacb7122d936a253d1d8b98
+  data.tar.gz: 234257c6569615bc71b4642c7d2f4850b79bbe5eefc3afc8b62eb899023d3a1e12fd3e81366c356817217b50899c7357fd6a9d16f59819c2ca3a1c0b55e9f480

data/history.md

@@ -1,3 +1,15 @@
+# 1.8.0
+
+- Security: implement standards compliant cookie handling by adding a
+  dependency on http-cookie. This breaks compatibility, but was necessary to
+  address a session fixation / cookie disclosure vulnerability.
+  (#369 / CVE-2015-1820)
+
+  Previously, any Set-Cookie headers found in an HTTP 30x response would be
+  sent to the redirection target, regardless of domain. Responses now expose a
+  cookie jar and respect standards compliant domain / path flags in Set-Cookie
+  headers.
+
 # 1.7.3
 
 - Security: redact password in URI from logs (#349 / OSVDB-117461)

data/lib/restclient/version.rb

@@ -1,5 +1,5 @@
 module RestClient
-  VERSION = '1.8.0.rc1' unless defined?(self::VERSION)
+  VERSION = '1.8.0' unless defined?(self::VERSION)
 
   def self.version
     VERSION

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rest-client
 version: !ruby/object:Gem::Version
-  version: 1.8.0.rc1
+  version: 1.8.0
 platform: ruby
 authors:
 - REST Client Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-23 00:00:00.000000000 Z
+date: 2015-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: webmock
@@ -215,9 +215,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 1.9.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.2.2