You are viewing a plain text version of this content. The canonical link for it is here.
Posted to rivet-dev@tcl.apache.org by Massimo Manghi <ma...@alice.it> on 2018/11/19 21:18:44 UTC

Rivet 3.0.4 (urgent)

Sorry gentlemen, but I wish to urgently re-release rivet as 3.0.4. The 
explanation for doing it is in bug

https://bz.apache.org/bugzilla/show_bug.cgi?id=62926

Fully qualified forms of ::rivet::var,::rivet::var_qs and 
::rivet::var_post were creating an obnoxious interference between data 
posted through POST and GET methods. The problem can go unnoticed 
because both ::rivet::var_qs and ::rivet::var_post basically fell back 
to ::rivet::var which makes no distinction between POST and GET related 
data. The fix required to add in Rivet_Var (rivetCore.c) the 
functionality of 'namespace tail' command which has been taken straight 
from Tcl 8.6 (procedure NamespaceTailCmd). Just about a dozen lines but 
I guess a mention of the origin of that should be made in the file.

More tests have been added to check for the case of POST/GET data crosstalk.

Please, point your working copy to the 3.0 branch and run the tests or 
test the module on your development machine. This fix potentially can 
break code written on wrong assumptions about these commands (i.e. 
reading url encoded variables calling ::rivet::var_post or POSTed data 
calling ::rivet::var_qs)

thanks

  -- Massimo

---------------------------------------------------------------------
To unsubscribe, e-mail: rivet-dev-unsubscribe@tcl.apache.org
For additional commands, e-mail: rivet-dev-help@tcl.apache.org