[Jifty-commit] r1791 - jifty/trunk

jifty-commit at lists.jifty.org jifty-commit at lists.jifty.org
Fri Aug 11 02:23:07 EDT 2006


Author: jesse
Date: Fri Aug 11 02:23:06 2006
New Revision: 1791

Modified:
   jifty/trunk/   (props changed)
   jifty/trunk/Makefile.PL

Log:
 r13410 at pinglin:  jesse | 2006-07-03 23:04:28 -0400
 * Bart Bunting provided docs for how to include your own javascript libs
 r13449 at pinglin:  jesse | 2006-07-04 16:41:13 -0400
 * Sean noticed a missing Silk icon.
 
 r13574 at pinglin:  jesse | 2006-07-06 20:05:03 -0400
 * Request URIs should start with a leading /
 r13575 at pinglin:  jesse | 2006-07-06 20:06:01 -0400
 * SECURITY FIX: The static file server, when coupled with the standalone webserver did not 
   adequately protect against relative path injection attacks
 
 r13595 at pinglin:  jesse | 2006-07-06 20:33:09 -0400
 * Fix the fix. (We were overly restrictive)
 
 r13607 at pinglin:  jesse | 2006-07-07 00:31:25 -0400
 * 0.60706 release. SECURITY FIX
 
   * SECURITY UPDATE: Previous versions of Jifty did not
   protect users against a class of remote data access vulnerability. If an
   attacker knew the structure of your local filesystem and you were using
   the "standalone" webserver in production, the attacker could gain read
   only access to local files.
 
   We found this vulnerability on 6 July 2006 during an internal Security
   scan. We've added new tests to ensure that these and other similar
   vulnerabilities don't recur.
 
   We recommend that ALL users of Jifty UPGRADE to 0.60706 IMMEDIATELY.
 
 r13618 at pinglin:  jesse | 2006-07-07 00:46:51 -0400
 * The tests for the security fix weren't pushed
 r13619 at pinglin:  jesse | 2006-07-07 00:48:24 -0400
 * Merge fixups!
 r13626 at pinglin:  jesse | 2006-07-07 01:47:24 -0400
 * 0.060707
 r13652 at pinglin:  jesse | 2006-07-07 20:29:52 -0400
 * toggleable page region clickables weren't doing the right thing when used in non-ajax mode
 r13922 at pinglin:  jesse | 2006-07-14 03:28:08 -0400
 * Stop notification from flipping out if you use a scalar as the to
 r13923 at pinglin:  jesse | 2006-07-14 03:42:07 -0400
 * fix the compile failure
 r13924 at pinglin:  jesse | 2006-07-14 03:42:34 -0400
 * basic smoke test for jifty's notifications 
 r13964 at pinglin:  jesse | 2006-07-14 19:12:07 -0400
 * Switched Jifty::Web::url to use uri.pm rather than "heuristics"
 r13968 at pinglin:  jesse | 2006-07-14 21:27:22 -0400
 * Proper port support on urls. Thanks to jpeacock.
 r14160 at pinglin:  jesse | 2006-07-18 21:43:13 -0400
  * packaging plan updates
 r14175 at pinglin:  jesse | 2006-07-19 00:16:44 -0400
 * Auto-accept cpan's wisdom about prompts
 r14349 at pinglin:  jesse | 2006-07-22 19:18:11 -0400
 * Dispatcher fixes to deal with the better canonicalization we started doing in
   0.60707
 r14354 at pinglin:  jesse | 2006-07-22 19:40:40 -0400
 * Even though Jifty::Web uses URIs internally, external code shouldn't be forced to
   (This API change broke things after the last release)
 r14355 at pinglin:  jesse | 2006-07-22 19:46:10 -0400
 * MANIFEST updates
 r14356 at pinglin:  jesse | 2006-07-22 20:15:20 -0400
 * 0.60722
 r14364 at pinglin:  jesse | 2006-07-23 01:26:16 -0400
 * Don't blow up when trying to check if action mixins are autogenerated
 r14366 at pinglin:  jesse | 2006-07-24 16:13:49 -0400
 * oscon
 r14517 at pinglin:  jesse | 2006-07-26 17:42:59 -0400
  * oscon talk final version
 r14603 at pinglin:  jesse | 2006-07-28 23:44:35 -0400
  * Basic placeholder for REST plugin tests
 r14611 at pinglin:  jesse | 2006-07-29 00:23:41 -0400
 * First tests!
 r14615 at pinglin:  jesse | 2006-07-29 00:34:25 -0400
 * test for audrey's next unimplemented feature 'describe this model class'
 r14617 at pinglin:  jesse | 2006-07-29 00:36:12 -0400
 * tests were wrong. hard to see that before we have runnign code
 r14619 at pinglin:  jesse | 2006-07-29 00:58:47 -0400
 * Next REST Test pass
 r14902 at pinglin:  jesse | 2006-08-04 02:27:39 -0400
 * Don't try to lowercase session information on postgres
 r15004 at pinglin:  jesse | 2006-08-06 14:56:38 -0400
 * canonicalization wasn't being properly run on models before validation
 r15005 at pinglin:  jesse | 2006-08-06 15:05:10 -0400
 * Added explicit tests for Jifty::Action::Redirect
 r15077 at pinglin:  jesse | 2006-08-08 00:33:44 -0400
 * Closer to stripping data from our base xml webservices
 r15136 at pinglin:  jesse | 2006-08-08 14:17:16 -0400
 Added the ability to support target attributes in menu items and clickables
 r20323 at pinglin:  jesse | 2006-08-11 02:22:52 -0400
 * reverting a merge  screw up


Modified: jifty/trunk/Makefile.PL
==============================================================================
--- jifty/trunk/Makefile.PL	(original)
+++ jifty/trunk/Makefile.PL	Fri Aug 11 02:23:06 2006
@@ -53,6 +53,7 @@
 requires('Object::Declare' => '0.13');
 requires('PAR::Dist::FromCPAN');
 requires('Params::Validate');
+requires('PerlIO::gzip');
 requires('Pod::Simple'); #Pod::Simple::Text
 requires('Scalar::Defer' => '0.06');
 requires('String::Koremutake');


More information about the Jifty-commit mailing list