You are viewing a plain text version of this content. The canonical link for it is here.
Posted to rivet-dev@tcl.apache.org by Massimo Manghi <ma...@alice.it> on 2018/11/19 21:18:44 UTC
Rivet 3.0.4 (urgent)
Sorry gentlemen, but I wish to urgently re-release rivet as 3.0.4. The
explanation for doing it is in bug
https://bz.apache.org/bugzilla/show_bug.cgi?id=62926
Fully qualified forms of ::rivet::var,::rivet::var_qs and
::rivet::var_post were creating an obnoxious interference between data
posted through POST and GET methods. The problem can go unnoticed
because both ::rivet::var_qs and ::rivet::var_post basically fell back
to ::rivet::var which makes no distinction between POST and GET related
data. The fix required to add in Rivet_Var (rivetCore.c) the
functionality of 'namespace tail' command which has been taken straight
from Tcl 8.6 (procedure NamespaceTailCmd). Just about a dozen lines but
I guess a mention of the origin of that should be made in the file.
More tests have been added to check for the case of POST/GET data crosstalk.
Please, point your working copy to the 3.0 branch and run the tests or
test the module on your development machine. This fix potentially can
break code written on wrong assumptions about these commands (i.e.
reading url encoded variables calling ::rivet::var_post or POSTed data
calling ::rivet::var_qs)
thanks
-- Massimo
---------------------------------------------------------------------
To unsubscribe, e-mail: rivet-dev-unsubscribe@tcl.apache.org
For additional commands, e-mail: rivet-dev-help@tcl.apache.org