| 1 | Version 3.15 Wed Dec 7 15:13:22 EST 2005
|
|---|
| 2 | 1. Remove extraneous "?" from self_url() when URI contains a ? but no query string.
|
|---|
| 3 |
|
|---|
| 4 | Version 3.14 Tue Dec 6 17:12:03 EST 2005
|
|---|
| 5 | 1. Fixed broken scrolling_list() select attribute.
|
|---|
| 6 |
|
|---|
| 7 | Version 3.13
|
|---|
| 8 | 1. Removed extraneous empty "?" from end of self_url().
|
|---|
| 9 |
|
|---|
| 10 | Version 3.12
|
|---|
| 11 | 1. Fixed virtual_port so that it works properly with https protocol.
|
|---|
| 12 | 2. Fixed documentation for upload_hook().
|
|---|
| 13 | 3. Added POSTDATA documentation.
|
|---|
| 14 | 4. Made upload_hook() work in function-oriented mode.
|
|---|
| 15 | 5. Fixed POST_MAX behavior so that it doesn't cause client to hang.
|
|---|
| 16 | 6. Disabled automatic tab indexes and added new -tabindex pragma to
|
|---|
| 17 | turn automatic indexes back on.
|
|---|
| 18 | 7. The url() and self_url() methods now work better in the context of Apache
|
|---|
| 19 | mod_rewrite. Be advised that path_info() may give you confusing results
|
|---|
| 20 | when mod_rewrite is active because Apache calculates the path info *after*
|
|---|
| 21 | rewriting. This is mostly worked around in url() and self_url(), but you
|
|---|
| 22 | may notice some anomalies.
|
|---|
| 23 | 8. Removed empty (and non-validating) <div> from code emitted by end_form().
|
|---|
| 24 | 9. Fixed CGI::Carp to work correctly with Mod_perl 1.29 in an Apache 2 environment.
|
|---|
| 25 | 10. Setting $CGI::TMPDIRECTORY should now be effective.
|
|---|
| 26 |
|
|---|
| 27 | Version 3.11
|
|---|
| 28 | 1. Killed warning in CGI::Cookie about MOD_PERL_API_VERSION
|
|---|
| 29 | 2. Fixed append() so that it works in function mode.
|
|---|
| 30 | 3. Workaround for a bug that appears in Apache2 versions through 2.0.54
|
|---|
| 31 | in which SCRIPT_NAME and PATH_INFO are incorrect if the additional path_info
|
|---|
| 32 | contains a double slash. This workaround will handle the common case of
|
|---|
| 33 | http://mysite.com/cgi-bin/log.cgi/http://www.some.other.site/args, but will
|
|---|
| 34 | not handle the uncommon case of a ScriptAlias directive that adds additional
|
|---|
| 35 | path information to the end of the translated URI.
|
|---|
| 36 |
|
|---|
| 37 | Version 3.10
|
|---|
| 38 | 1. Added Apache2::RequestIO, which is necessary for mp2 interoperability.
|
|---|
| 39 |
|
|---|
| 40 | Version 3.09
|
|---|
| 41 | 1. Fixed tabindex="0" when using CGI to create forms without a prior start_html
|
|---|
| 42 | 2. Removed warning about non-numeric MOD_PERL_API_VERSION.
|
|---|
| 43 |
|
|---|
| 44 | Version 3.08
|
|---|
| 45 | 1. update support for mod_perl 2.0. versions prior to
|
|---|
| 46 | mod_perl 1.999_22 (2.0.0-RC5) are no longer supported.
|
|---|
| 47 |
|
|---|
| 48 | Version 3.07
|
|---|
| 49 | 1. Fixed typo in mod_perl detection.
|
|---|
| 50 |
|
|---|
| 51 | Version 3.06
|
|---|
| 52 |
|
|---|
| 53 | 1. Fixed bare call to script() in start_html
|
|---|
| 54 | 2. Moved Fh::DESTROY out of autoloaded functions so as to avoid
|
|---|
| 55 | clobbering $@ when CGI functions are executed in an eval{}
|
|---|
| 56 | context.
|
|---|
| 57 | 3. mod_perl 2.0 version detection patch in CGI::Cookie provided by
|
|---|
| 58 | Allen Day.
|
|---|
| 59 | 4. autoEscape() flag is now respected when generating extra
|
|---|
| 60 | attributes.
|
|---|
| 61 | 5. Tests for *tag start/end generation from Shlomi Fish.
|
|---|
| 62 | 6. Support for can() method provided by Ron Savage.
|
|---|
| 63 | 7. Fix for lang='' when outputting XHTML.
|
|---|
| 64 | 8. Added support for chunked transfer encoding, as suggested by
|
|---|
| 65 | Hakan Ardo
|
|---|
| 66 | 9. Fixed clobbering of row and column headers in tableized radio
|
|---|
| 67 | and checkbox groups, as reported by Nicolas Thierry-Mieg.
|
|---|
| 68 | 10. <Label> tags are now associated with form elements, as suggested
|
|---|
| 69 | by accessibility guidelines.
|
|---|
| 70 | 11. The <?xml> directive produced by start_html is now turned off by
|
|---|
| 71 | default and the charset is specified in a <meta> directive. Apparently
|
|---|
| 72 | IE6 (and maybe some versions of Opera) were getting confused by this.
|
|---|
| 73 | 12. Support for tab indexes.
|
|---|
| 74 | 13. Retired the HTML docs. The POD docs are now primary documentation.
|
|---|
| 75 | 14. CGI::Carp now correctly detects and handles Apache::Dispatch.
|
|---|
| 76 | 15. CGI::Util::utf8_chr now correctly sets the UTF8 flag on 5.006 or
|
|---|
| 77 | higher perls (fix courtesy Slaven Rezic).
|
|---|
| 78 |
|
|---|
| 79 |
|
|---|
| 80 | Version 3.05
|
|---|
| 81 |
|
|---|
| 82 | 1. Fixed uninitialized variable warning on start_form() when running
|
|---|
| 83 | from command line.
|
|---|
| 84 | 2. Fixed CGI::_set_attributes so that attributes with a - are handled
|
|---|
| 85 | correctly.
|
|---|
| 86 | 3. Fixed CGI::Carp::die() so as to avoid problems from _longmess()
|
|---|
| 87 | clobbering @_.
|
|---|
| 88 | 4. If HTTP_X_FORWARDED_HOST is defined (i.e. running under a proxy),
|
|---|
| 89 | the various functions that return HOST will use that instead.
|
|---|
| 90 | 5. Fix for undefined utf8() call in CGI::Util.
|
|---|
| 91 | 6. Changed the call to warningsToBrowser() in
|
|---|
| 92 | CGI::Carp::fatalsToBrowser to call only after HTTP header is sent
|
|---|
| 93 | (thanks to Didier Lebrun for noticing).
|
|---|
| 94 | 7. Patches from Dan Harkless to make CGI.pm validatable against HTML
|
|---|
| 95 | 3.2.
|
|---|
| 96 | 8. Fixed an extraneous "foo=bar" appearing when extra style
|
|---|
| 97 | parameters passed to start_html;
|
|---|
| 98 | 9. Fixed cross-site scripting bug in startform() pointed out by Dan
|
|---|
| 99 | Harkless.
|
|---|
| 100 | 10. Fixed documentation to discuss list context behavior of
|
|---|
| 101 | form-element generators explicitly.
|
|---|
| 102 | 11. Fixed incorrect results from end_form() when called in OO manner.
|
|---|
| 103 | 12. Fixed query string stripping in order to handle URLs containing
|
|---|
| 104 | escaped newlines.
|
|---|
| 105 | 13. During server push, set NPH to 0 rather than 1. This is supposed
|
|---|
| 106 | to fix problems with Apache.
|
|---|
| 107 | 14. Fixed incorrect processing of multipart form fields that contain
|
|---|
| 108 | embedded quotes. There's still the issue of how to handle ones
|
|---|
| 109 | that contain embedded semicolons, but no one has complained (yet).
|
|---|
| 110 | 15. Fixed documentation bug in -style argument to start_html()
|
|---|
| 111 | 16. Added -status argument to redirect().
|
|---|
| 112 |
|
|---|
| 113 | Version 3.04
|
|---|
| 114 |
|
|---|
| 115 | 1. Fixed the problem with mod_perl crashing when "defaults" button
|
|---|
| 116 | pressed.
|
|---|
| 117 |
|
|---|
| 118 | Version 3.03
|
|---|
| 119 |
|
|---|
| 120 | 1. Fix upload hook functionality
|
|---|
| 121 | 2. Workaround for CGI->unescape_html()
|
|---|
| 122 | 3. Bumped version numbers in CGI::Fast and CGI::Util for 5.8.3-tobe
|
|---|
| 123 |
|
|---|
| 124 | Version 3.02
|
|---|
| 125 |
|
|---|
| 126 | 1. Bring in Apache::Response just in case.
|
|---|
| 127 | 2. File upload on EBCDIC systems now works.
|
|---|
| 128 |
|
|---|
| 129 | Version 3.01
|
|---|
| 130 |
|
|---|
| 131 | 1. No fix yet for upload failures when running on EBCDIC server.
|
|---|
| 132 | 2. Fixed uninitialized glob warnings that appeared when file
|
|---|
| 133 | uploading under perl 5.8.2.
|
|---|
| 134 | 3. Added patch from Schlomi Fish to allow debugging of PATH_INFO from
|
|---|
| 135 | command line.
|
|---|
| 136 | 4. Added patch from Steve Hay to correctly unlink tmp files under
|
|---|
| 137 | mod_perl/windows
|
|---|
| 138 | 5. Added upload_hook functionality from Jamie LeTaul
|
|---|
| 139 | 6. Workarounds for mod_perl 2 IO issues. Check that file upload and
|
|---|
| 140 | state saving still working.
|
|---|
| 141 | 7. Added code for underreads.
|
|---|
| 142 | 8. Fixed misleading description of redirect() and relative URLs in
|
|---|
| 143 | the POD docs.
|
|---|
| 144 | 9. Workaround for weird interaction of CGI::Carp with Safe module
|
|---|
| 145 | reported by William McKee.
|
|---|
| 146 | 10. Added patches from Ilmari Karonen to improve behavior of
|
|---|
| 147 | CGI::Carp.
|
|---|
| 148 | 11. Fixed documentation error in -style argument.
|
|---|
| 149 | 12. Added virtual_port() method for finding out what port server is
|
|---|
| 150 | listening on in a virtual-host aware fashion.
|
|---|
| 151 |
|
|---|
| 152 | Version 3.00
|
|---|
| 153 |
|
|---|
| 154 | 1. Patch from Randal Schwartz to fix bug introduced by cross-site
|
|---|
| 155 | scripting vulnerability "fix."
|
|---|
| 156 | 2. Patch from JFreeman to replace UTF-8 escape constant of 0xfe with
|
|---|
| 157 | 0xfc. Hope this is right!
|
|---|
| 158 |
|
|---|
| 159 | Version 2.99
|
|---|
| 160 |
|
|---|
| 161 | 1. Patch from Steve Hay to fix extra Content-type: appearing on
|
|---|
| 162 | browser screen when FatalsToBrowser invoked.
|
|---|
| 163 | 2. Patch from Ewann Corvellec to fix cross-site scripting
|
|---|
| 164 | vulnerability.
|
|---|
| 165 | 3. Fixed tmpdir routine for file uploading to solve problem that
|
|---|
| 166 | occurs under mod_perl when tmpdir is writable at startup time, but
|
|---|
| 167 | not at session time.
|
|---|
| 168 |
|
|---|
| 169 | Version 2.98
|
|---|
| 170 |
|
|---|
| 171 | 1. Fixed crash in Dump() function.
|
|---|
| 172 |
|
|---|
| 173 | Version 2.97
|
|---|
| 174 |
|
|---|
| 175 | 1. Sigh. Uploaded wrong 2.96 to CPAN.
|
|---|
| 176 |
|
|---|
| 177 | Version 2.96
|
|---|
| 178 |
|
|---|
| 179 | 1. More bugfixes to the -style argument.
|
|---|
| 180 |
|
|---|
| 181 | Version 2.95
|
|---|
| 182 |
|
|---|
| 183 | 1. Fixed bugs in start_html(-style=>...) support introduced in 2.94.
|
|---|
| 184 |
|
|---|
| 185 | Version 2.94
|
|---|
| 186 |
|
|---|
| 187 | 1. Removed warning from reset() method.
|
|---|
| 188 | 2. Moved
|
|---|
| 189 |
|
|---|
| 190 | and tags into the :html3 group. Hope this removes undefined CGI::Area
|
|---|
| 191 | errors.
|
|---|
| 192 |
|
|---|
| 193 | Changed CGI::Carp to play with mod_perl2 and to (hopefully) restore
|
|---|
| 194 | reporting of compile-time errors.
|
|---|
| 195 |
|
|---|
| 196 | Fixed potential deadlock between web server and CGI.pm when aborting
|
|---|
| 197 | a read due to POST_MAX (reported by Antti Lankila).
|
|---|
| 198 |
|
|---|
| 199 | Fixed issue with tag-generating function not incorporating content
|
|---|
| 200 | when first variable undef.
|
|---|
| 201 |
|
|---|
| 202 | Fixed cross-site scripting bug reported by obscure.
|
|---|
| 203 |
|
|---|
| 204 | Fixed Dump() function to return correctly formed XHTML - bug
|
|---|
| 205 | reported by Ralph Siemsen.
|
|---|
| 206 |
|
|---|
| 207 | Version 2.93
|
|---|
| 208 |
|
|---|
| 209 | 1. Fixed embarassing bug in mp1 support.
|
|---|
| 210 |
|
|---|
| 211 | Version 2.92
|
|---|
| 212 |
|
|---|
| 213 | 1. Fix to be P3P compliant submitted from MPREWITT.
|
|---|
| 214 | 2. Added CGI->r() API for mod_perl1/mod_perl2.
|
|---|
| 215 | 3. Fixed bug in redirect() that was corrupting cookies.
|
|---|
| 216 | 4. Minor fix to behavior of reset() button to make it consistent with
|
|---|
| 217 | submit() button (first time this has been changed in 9 years).
|
|---|
| 218 | 5. Patch from Dan Kogai to handle UTF-8 correctly in 5.8 and higher.
|
|---|
| 219 | 6. Patch from Steve Hay to make CGI::Carp's error messages appear on
|
|---|
| 220 | MSIE browsers.
|
|---|
| 221 | 7. Added Yair Lenga's patch for non-urlencoded postings.
|
|---|
| 222 | 8. Added Stas Bekman's patches for mod_perl 2 compatibility.
|
|---|
| 223 | 9. Fixed uninitialized escape behavior submitted by William Campbell.
|
|---|
| 224 | 10. Fixed tied behavior so that you can pass arguments to tie()
|
|---|
| 225 | 11. Fixed incorrect generation of URLs when the path_info contains +
|
|---|
| 226 | and other odd characters.
|
|---|
| 227 | 12. Fixed redirect(-cookies=>$cookie) problem.
|
|---|
| 228 | 13. Fixed tag generation bug that affects -javascript passed to
|
|---|
| 229 | start_html().
|
|---|
| 230 |
|
|---|
| 231 | Version 2.91
|
|---|
| 232 |
|
|---|
| 233 | 1. Attribute generation now correctly respects the value of
|
|---|
| 234 | autoEscape().
|
|---|
| 235 | 2. Fixed endofrm() syntax error introduced by Ben Edgington's patch.
|
|---|
| 236 |
|
|---|
| 237 | Version 2.90
|
|---|
| 238 |
|
|---|
| 239 | 1. Fixed bug in redirect header handling.
|
|---|
| 240 | 2. Added P3P option to header().
|
|---|
| 241 | 3. Patches from Alexey Mahotkin to make CGI::Carp work correctly with
|
|---|
| 242 | object-oriented exceptions.
|
|---|
| 243 | 4. Removed inaccurate description of how to set multiple cookies from
|
|---|
| 244 | CGI::Cookie pod file.
|
|---|
| 245 | 5. Patch from Kevin Mahony to prevent running out of filehandles when
|
|---|
| 246 | uploading lots of files.
|
|---|
| 247 | 6. Documentation enhancement from Mark Fisher to note that the
|
|---|
| 248 | import_names() method transforms the parameter names into valid
|
|---|
| 249 | Perl names.
|
|---|
| 250 | 7. Patch from Dan Harkless to suppress lang attribute in <html> tag
|
|---|
| 251 | if specified as a null string.
|
|---|
| 252 | 8. Patch from Ben Edgington to fix broken XHTML-transitional 1.0
|
|---|
| 253 | validation on endform().
|
|---|
| 254 | 9. Custom html header fix from Steffen Beyer (first letter correctly
|
|---|
| 255 | upcased now)
|
|---|
| 256 | 10. Added a -verbatim option to stylesheet generation from Michael
|
|---|
| 257 | Dickson
|
|---|
| 258 | 11. Faster delete() method from Neelam Gupta
|
|---|
| 259 | 12. Fixed broken Cygwin support.
|
|---|
| 260 | 13. Added empty charset support from Bradley Baetz
|
|---|
| 261 | 14. Patches from Doug Perham and Kevin Mahoney to fix file upload
|
|---|
| 262 | failures when uploaded file is a multiple of 4096.
|
|---|
| 263 |
|
|---|
| 264 | Version 2.89
|
|---|
| 265 |
|
|---|
| 266 | 1. Fixed behavior of ACTION tag when POSTING to a URL that has a
|
|---|
| 267 | query string.
|
|---|
| 268 | 2. Added Patch from Michael Rommel to handle multipart/mixed uploads
|
|---|
| 269 | from Opera
|
|---|
| 270 |
|
|---|
| 271 | Version 2.88
|
|---|
| 272 |
|
|---|
| 273 | 1. Fixed problem with uploads being refused under Perl 5.8 when under
|
|---|
| 274 | Taint mode.
|
|---|
| 275 | 2. Fixed uninitialized variable warnings under Perl 5.8.
|
|---|
| 276 | 3. Fixed CGI::Pretty regression test failures.
|
|---|
| 277 |
|
|---|
| 278 | Version 2.87
|
|---|
| 279 |
|
|---|
| 280 | 1. Security hole patched: when processing multipart/form-data
|
|---|
| 281 | postings, most arguments were being untainted silently. Returned
|
|---|
| 282 | arguments are now tainted correctly. This may cause some scripts
|
|---|
| 283 | to fail that used to work (thanks to Nick Cleaton for pointing
|
|---|
| 284 | this out and persisting until it was fixed).
|
|---|
| 285 | 2. Update for mod_perl 2.0.
|
|---|
| 286 | 3. Pragmas such as -no_xhtml are now respected in mod_perl
|
|---|
| 287 | environment.
|
|---|
| 288 |
|
|---|
| 289 | Version 2.86
|
|---|
| 290 |
|
|---|
| 291 | 1. Fixes for broken CGI::Cookie expiration dates introduced in 2.84.
|
|---|
| 292 |
|
|---|
| 293 | Version 2.85
|
|---|
| 294 |
|
|---|
| 295 | 1. Fix for broken autoEscape function introduced in 2.84.
|
|---|
| 296 |
|
|---|
| 297 | Version 2.84
|
|---|
| 298 |
|
|---|
| 299 | 1. Fix for failed file uploads on Cygwin platforms.
|
|---|
| 300 | 2. HTML escaping code now replaced 0x8b and 0x9b with unicode
|
|---|
| 301 | references < and *#8250;
|
|---|
| 302 |
|
|---|
| 303 | Version 2.83
|
|---|
| 304 |
|
|---|
| 305 | 1. Fixed autoEscape() documentation inconsistencies.
|
|---|
| 306 | 2. Patch from Ville Skyttä to fix a number of XHTML inconsistencies.
|
|---|
| 307 | 3. Added Max-Age to list of CGI::Cookie headers.
|
|---|
| 308 |
|
|---|
| 309 | Version 2.82
|
|---|
| 310 |
|
|---|
| 311 | 1. Patch from Rudolf Troller to add attribute setting and option
|
|---|
| 312 | groups to form fields.
|
|---|
| 313 | 2. Patch from Simon Perreault for silent crashes when using CGI::Carp
|
|---|
| 314 | under mod_perl.
|
|---|
| 315 | 3. Patch from Scott Gifford allows you to set the program name for
|
|---|
| 316 | CGI::Carp.
|
|---|
| 317 |
|
|---|
| 318 | Version 2.81
|
|---|
| 319 |
|
|---|
| 320 | 1. Removed extraneous slash from end of stylesheet tags generated by
|
|---|
| 321 | start_html in non-XHTML mode.
|
|---|
| 322 | 2. Changed behavior of CGI::Carp with respect to eval{} contexts so
|
|---|
| 323 | that output behaves properly in mod_perl environments.
|
|---|
| 324 | 3. Fixed default DTD so that it validates with W3C validator.
|
|---|
| 325 |
|
|---|
| 326 | Version 2.80
|
|---|
| 327 |
|
|---|
| 328 | 1. Fixed broken messages in CGI::Carp.
|
|---|
| 329 | 2. Changed checked="1" to checked="checked" for real XHTML
|
|---|
| 330 | compatibility.
|
|---|
| 331 | 3. Resurrected REQUEST_URI code so that url() works correctly with
|
|---|
| 332 | multiviews.
|
|---|
| 333 |
|
|---|
| 334 | Version 2.79
|
|---|
| 335 |
|
|---|
| 336 | 1. Changes to CGI::Carp to avoid "subroutine redefined" error
|
|---|
| 337 | messages.
|
|---|
| 338 | 2. Default DTD is now XHTML 1.0 Transitional
|
|---|
| 339 | 3. Patches to support all HTML4 tags.
|
|---|
| 340 |
|
|---|
| 341 | Version 2.78
|
|---|
| 342 |
|
|---|
| 343 | 1. Added ability to change encoding in <?xml> assertion.
|
|---|
| 344 | 2. Fixed the old escapeHTML('CGI') ne "CGI" bug
|
|---|
| 345 | 3. In accordance with XHTML requirements, there are no longer any
|
|---|
| 346 | minimized attributes, such as "checked".
|
|---|
| 347 | 4. Patched bug which caused file uploads of exactly 4096 bytes to be
|
|---|
| 348 | truncated to 4094 (thanks to Kevin Mahony)
|
|---|
| 349 | 5. New tests and fixes to CGI::Pretty (thanks to Michael Schwern).
|
|---|
| 350 |
|
|---|
| 351 | Version 2.77
|
|---|
| 352 |
|
|---|
| 353 | 1. No new features, but released in order to fix an apparent CPAN
|
|---|
| 354 | bug.
|
|---|
| 355 |
|
|---|
| 356 | Version 2.76
|
|---|
| 357 |
|
|---|
| 358 | 1. New esc.t regression test for EBCDIC translations courtesy Peter
|
|---|
| 359 | Prymmer.
|
|---|
| 360 | 2. Patches from James Jurach to make compatible with FCGI-ProcManager
|
|---|
|
|---|
