rest-client 1.8.0.rc1-x86-mswin32 → 1.8.0-x86-mswin32

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 8b7934a4aaa0e302fcfb0926159cfef04a4149e8
-  data.tar.gz: be1faf8c92ad2cf288474439f00de967f33e6e07
+  metadata.gz: bf700420572a27d4bb13480eb5e60a6348d45d84
+  data.tar.gz: b7613f419e6b3b4ddb365f180b748754591d4251
 SHA512:
-  metadata.gz: a851c3ad9a5c66eb9e03651c593f2bdff6166abd6e5113e2e80fbbebabe798e1e59e906c0341074f56e5fcd403359a7924ff8d7a09cc8f8c91a90011a565b37c
-  data.tar.gz: e16f8c38f67f2130e34b8a4db412054dacd3cca4ed22361eb7f2f193c571eba0e6c7c87c22e8892a33fffa3984eaed85c5e4b8e72424402ba7274e0b4f4a905c
+  metadata.gz: bb5f216b25455b5f086a9c6c09873404be14b31004a81ae3a1c287cec0d5a7cdc17424b175512782f2c48c396a56991af49f2586021404a342fa70754e7aadb7
+  data.tar.gz: afcc714aff25abd2a55891c40d86b65aa8b02b4b77ef10cb5974e843dad4b7dee0102b8cfb94d45f2a18614ed899e8743c82b2694c1142b58edbaeb3440256bd

data/history.md

@@ -1,3 +1,15 @@
+# 1.8.0
+
+- Security: implement standards compliant cookie handling by adding a
+  dependency on http-cookie. This breaks compatibility, but was necessary to
+  address a session fixation / cookie disclosure vulnerability.
+  (#369 / CVE-2015-1820)
+
+  Previously, any Set-Cookie headers found in an HTTP 30x response would be
+  sent to the redirection target, regardless of domain. Responses now expose a
+  cookie jar and respect standards compliant domain / path flags in Set-Cookie
+  headers.
+
 # 1.7.3
 
 - Security: redact password in URI from logs (#349 / OSVDB-117461)

data/lib/restclient/version.rb

@@ -1,5 +1,5 @@
 module RestClient
-  VERSION = '1.8.0.rc1' unless defined?(self::VERSION)
+  VERSION = '1.8.0' unless defined?(self::VERSION)
 
   def self.version
     VERSION

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: rest-client
 version: !ruby/object:Gem::Version
-  version: 1.8.0.rc1
+  version: 1.8.0
 platform: x86-mswin32
 authors:
 - REST Client Team
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2015-03-23 00:00:00.000000000 Z
+date: 2015-03-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: webmock
@@ -229,9 +229,9 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 1.9.2
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
 rubyforge_project: 
 rubygems_version: 2.2.2