r74242 - in /trunk/libanyevent-http-perl: Changes HTTP.pm META.json Makefile.PL README debian/changelog

Thu May 12 08:05:20 UTC 2011

Author: periapt-guest
Date: Thu May 12 08:05:05 2011
New Revision: 74242

URL: http://svn.debian.org/wsvn/pkg-perl/?sc=1&rev=74242
Log:
New upstream release

Modified:
    trunk/libanyevent-http-perl/Changes
    trunk/libanyevent-http-perl/HTTP.pm
    trunk/libanyevent-http-perl/META.json
    trunk/libanyevent-http-perl/Makefile.PL
    trunk/libanyevent-http-perl/README
    trunk/libanyevent-http-perl/debian/changelog

Modified: trunk/libanyevent-http-perl/Changes
URL: http://svn.debian.org/wsvn/pkg-perl/trunk/libanyevent-http-perl/Changes?rev=74242&op=diff
==============================================================================

--- trunk/libanyevent-http-perl/Changes (original)
+++ trunk/libanyevent-http-perl/Changes Thu May 12 08:05:05 2011
@@ -3,11 +3,17 @@
 TODO: provide lwp_request function that takes an lwp http requets and returns a http response.
 TODO: httpbis: $location = URI->new_abs($location, "$scheme://$host:$port$path_query")->as_string;
 
+2.11 Tue May 10 14:33:28 CEST 2011
+	- the keepalive session cache wouldn't take port and scheme into account
+          when reusing connection - potentially causing information leaks
+          (reported by Nick Kostirya).
+	- bump AnyEvent dependency version (reported by Richard Harris).
+
 2.1  Thu Feb 24 13:11:51 CET 2011
 	- the keepalive and persistent parameters were actually named
           differently in the code - they now work as documented.
         - fix a bug where callbacks would sometimes never be called when
-          the request timeout is near or below the persistent conenction
+          the request timeout is near or below the persistent connection
           timeout (testcase by Cindy Wang).
         - destroying the guard would have no effect when a request was
           recursing or being retired.

Modified: trunk/libanyevent-http-perl/HTTP.pm
URL: http://svn.debian.org/wsvn/pkg-perl/trunk/libanyevent-http-perl/HTTP.pm?rev=74242&op=diff
==============================================================================
--- trunk/libanyevent-http-perl/HTTP.pm (original)
+++ trunk/libanyevent-http-perl/HTTP.pm Thu May 12 08:05:05 2011
@@ -48,7 +48,7 @@
 
 use base Exporter::;
 
-our $VERSION = '2.1';
+our $VERSION = '2.11';
 
 our @EXPORT = qw(http_get http_post http_head http_request);
 
@@ -170,6 +170,9 @@
 You really should provide your own C<User-Agent:> header value that is
 appropriate for your program - I wouldn't be surprised if the default
 AnyEvent string gets blocked by webservers sooner or later.
+
+Also, make sure that your headers names and values do not contain any
+embedded newlines.
 
 =item timeout => $seconds
 
@@ -780,7 +783,7 @@
    my $was_persistent; # true if this is actually a recycled connection
 
    # the key to use in the keepalive cache
-   my $ka_key = "$uhost\x00$arg{sessionid}";
+   my $ka_key = "$uscheme\x00$uhost\x00$uport\x00$arg{sessionid}";
 
    $hdr{connection} = ($persistent ? $keepalive ? "keep-alive " : "" : "close ") . "Te"; #1.1
    $hdr{te}         = "trailers" unless exists $hdr{te}; #1.1

Modified: trunk/libanyevent-http-perl/META.json
URL: http://svn.debian.org/wsvn/pkg-perl/trunk/libanyevent-http-perl/META.json?rev=74242&op=diff
==============================================================================
--- trunk/libanyevent-http-perl/META.json (original)
+++ trunk/libanyevent-http-perl/META.json Thu May 12 08:05:05 2011
@@ -11,7 +11,7 @@
    },
    "generated_by" : "ExtUtils::MakeMaker::JSONMETA version 7.000",
    "distribution_type" : "module",
-   "version" : "2.1",
+   "version" : "2.11",
    "name" : "AnyEvent-HTTP",
    "author" : [],
    "license" : "unknown",
@@ -19,7 +19,7 @@
       "ExtUtils::MakeMaker" : 0
    },
    "requires" : {
-      "AnyEvent" : 5,
+      "AnyEvent" : 5.33,
       "common::sense" : 3.3
    },
    "abstract" : null,

Modified: trunk/libanyevent-http-perl/Makefile.PL
URL: http://svn.debian.org/wsvn/pkg-perl/trunk/libanyevent-http-perl/Makefile.PL?rev=74242&op=diff
==============================================================================
--- trunk/libanyevent-http-perl/Makefile.PL (original)
+++ trunk/libanyevent-http-perl/Makefile.PL Thu May 12 08:05:05 2011
@@ -9,7 +9,7 @@
     NAME         => "AnyEvent::HTTP",
     VERSION_FROM => "HTTP.pm",
     PREREQ_PM    => {
-       AnyEvent      => 5.0,
+       AnyEvent      => 5.33,
        common::sense => 3.3,
     },
 });

Modified: trunk/libanyevent-http-perl/README
URL: http://svn.debian.org/wsvn/pkg-perl/trunk/libanyevent-http-perl/README?rev=74242&op=diff
==============================================================================
--- trunk/libanyevent-http-perl/README (original)
+++ trunk/libanyevent-http-perl/README Thu May 12 08:05:05 2011
@@ -122,6 +122,9 @@
             that is appropriate for your program - I wouldn't be surprised
             if the default AnyEvent string gets blocked by webservers sooner
             or later.
+
+            Also, make sure that your headers names and values do not
+            contain any embedded newlines.
 
         timeout => $seconds
             The time-out to use for various stages - each connect attempt

Modified: trunk/libanyevent-http-perl/debian/changelog
URL: http://svn.debian.org/wsvn/pkg-perl/trunk/libanyevent-http-perl/debian/changelog?rev=74242&op=diff
==============================================================================
--- trunk/libanyevent-http-perl/debian/changelog (original)
+++ trunk/libanyevent-http-perl/debian/changelog Thu May 12 08:05:05 2011
@@ -1,3 +1,9 @@
+libanyevent-http-perl (2.11-1) UNRELEASED; urgency=low
+
+  * New upstream release
+
+ -- Nicholas Bamber <nicholas at periapt.co.uk>  Thu, 12 May 2011 09:08:36 +0100
+
 libanyevent-http-perl (2.10-1) unstable; urgency=low
 
   [ Jonathan Yu ]


