rest-client 1.8.0.rc1-x86-mingw32 → 1.8.0-x86-mingw32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 67a605ad9df5e5ffab7cfd4f699ac98f3f7d932c
-  data.tar.gz: 643e9f2417da7a64d0bc5b1bf2640869a0954265
+  metadata.gz: 6a9323921e19e016c9821fd4b252cb0bcb461adb
+  data.tar.gz: fa2f669653292404bc814fb436c17755060a75a6
 SHA512:
-  metadata.gz: 25a88d9617727d50547f043b15caac64060b51e7ac46b0297464db656ed670652b5247add06e206e02053c2c81fce91a5a5273547df9b568c4dfd4035e2e1959
-  data.tar.gz: 709ac12e58ee9889d3e5cda11db54061ebda06ca2112e8a2ce02d768b5e2b2dfe244a77b42fa73ffd06bb395d68f5511f229cdfbcb9e1aea867615f18f001e6d
+  metadata.gz: 3604884793a5be0c2bdee13db2e980af703fd79d0fcd174970931ee812c1bd446df8390ca320c417858245841d11d6f0f4b2001cd88901120d4b639c4e642221
+  data.tar.gz: 234257c6569615bc71b4642c7d2f4850b79bbe5eefc3afc8b62eb899023d3a1e12fd3e81366c356817217b50899c7357fd6a9d16f59819c2ca3a1c0b55e9f480

data/history.md

@@ -1,3 +1,15 @@
+# 1.8.0
+
+- Security: implement standards compliant cookie handling by adding a
+  dependency on http-cookie. This breaks compatibility, but was necessary to
+  address a session fixation / cookie disclosure vulnerability.
+  (#369 / CVE-2015-1820)
+
+  Previously, any Set-Cookie headers found in an HTTP 30x response would be
+  sent to the redirection target, regardless of domain. Responses now expose a
+  cookie jar and respect standards compliant domain / path flags in Set-Cookie
+  headers.
+
 # 1.7.3
 
 - Security: redact password in URI from logs (#349 / OSVDB-117461)

data/lib/restclient/version.rb

@@ -1,5 +1,5 @@
 module RestClient
-  VERSION = '1.8.0.rc1' unless defined?(self::VERSION)
+  VERSION = '1.8.0' unless defined?(self::VERSION)
 
   def self.version
     VERSION

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rest-client
 version: !ruby/object:Gem::Version
-  version: 1.8.0.rc1
+  version: 1.8.0
 platform: x86-mingw32
 authors:
 - REST Client Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-23 00:00:00.000000000 Z
+date: 2015-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: webmock
@@ -229,9 +229,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 1.9.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.2.2