Rack

Rack wraps HTTP requests and responses.

By doing this, it unifies and distills the API for web servers, web frameworks, and software in between (the so-called middleware) into a single method call.

Rack is basically a common API for connecting web frameworks, web servers and layers of software inbetween.

What is new in this release:

• Fixed timing attack against Rack::Session::Cookie
• Fixed symlink path traversal in Rack::File
• Added various methods to Session for enhanced Rails compatibility
• Request#trusted_proxy? now only matches whole stirngs
• Added JSON cookie coder, to be default in Rack 1.6+ due to security concerns
• URLMap host matching in environments that don't set the Host header fixed
• Fixed a race condition that could result in overwritten pidfiles
• Various documentation additions

What is new in version 1.6.1:

• Fixed timing attack against Rack::Session::Cookie
• Fixed symlink path traversal in Rack::File
• Added various methods to Session for enhanced Rails compatibility
• Request#trusted_proxy? now only matches whole stirngs
• Added JSON cookie coder, to be default in Rack 1.6+ due to security concerns
• URLMap host matching in environments that don't set the Host header fixed
• Fixed a race condition that could result in overwritten pidfiles
• Various documentation additions

What is new in version 1.6.0:

• Fixed timing attack against Rack::Session::Cookie
• Fixed symlink path traversal in Rack::File
• Added various methods to Session for enhanced Rails compatibility
• Request#trusted_proxy? now only matches whole stirngs
• Added JSON cookie coder, to be default in Rack 1.6+ due to security concerns
• URLMap host matching in environments that don't set the Host header fixed
• Fixed a race condition that could result in overwritten pidfiles
• Various documentation additions

What is new in version 1.3.1:

• Fix 1.9.1 support.
• Fix JRuby support.
• Properly handle $KCODE in Rack::Utils.escape.
• Make method_missing/respond_to behavior consistent for Rack::Lock, Rack::Auth::Digest::Request and Rack::Multipart::UploadedFile.
• Reenable passing rack.session to session middleware.
• Rack::CommonLogger handles streaming responses correctly.
• Rack::MockResponse calls close on the body object.
• Fix a DOS vector from MRI stdlib backport.