| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Upstream provides a pyproject.toml which declares a flit_core.buildapi build backend for PEP-517 packaging instead of setuptools. Also, RDEPENDS updated according to it.
Removed CLEANBROKEN because it is not necessary.
Changelog:
Version 3.0.1
Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407
Version 3.0.0
Remove previously deprecated code.
Deprecate the __version__ attribute. Use feature detection, or importlib.metadata.version("werkzeug"), instead.
generate_password_hash uses scrypt by default.
Add the "werkzeug.profiler" item to the WSGI environ dictionary passed to ProfilerMiddleware’s filename_format function. It contains the elapsed and time values for the profiled request.
Explicitly marked the PathConverter as non path isolating.
Version 2.3.8
Fix slow multipart parsing for large parts potentially enabling DoS attacks. CWE-407
Version 2.3.7
Use flit_core instead of setuptools as build backend.
Fix parsing of multipart bodies.
Adjust index of last newline in data start.
Parsing ints from header values strips spacing first.
Fix empty file streaming when testing.
Clearer error message when URL rule does not start with slash.
Accept q value can be a float without a decimal part.
Signed-off-by: alperak <alperyasinak1@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
|
