diff options
| author | taca <taca@pkgsrc.org> | 2012-04-29 16:11:17 +0000 |
|---|---|---|
| committer | taca <taca@pkgsrc.org> | 2012-04-29 16:11:17 +0000 |
| commit | d178ba6939a46194534a5a6be4d1a51876b55fc8 (patch) | |
| tree | 4537c36b784cfec8fb6433af79f1d7a77f636150 /www/ruby-mechanize/Makefile | |
| parent | 93ad96561f0ee239d6a565739d488fe777c407f5 (diff) | |
| download | pkgsrc-d178ba6939a46194534a5a6be4d1a51876b55fc8.tar.gz | |
Update ruby-mechanize to 2.4.
=== 2.4
* Security fix:
Mechanize#auth and Mechanize#basic_auth allowed disclosure of passwords to
malicious servers and have been removed.
In prior versions of mechanize only one set of HTTP authentication
credentials were allowed for all connections. If a mechanize instance
connected to more than one server then a malicious server detecting
mechanize could ask for HTTP Basic authentication. This would expose the
username and password intended only for one server.
Mechanize#auth and Mechanize#basic_auth now warn when used.
To fix the warning switch to Mechanize#add_auth which requires at the URI
the credentials are intended for, the username and the password.
Optionally an HTTP authentication realm or NTLM domain may be provided.
* Minor enhancement
* Improved exception messages for 401 Unauthorized responses. Mechanize now
tells you if you were missing credentials, had an incorrect password, etc.
Diffstat (limited to 'www/ruby-mechanize/Makefile')
| -rw-r--r-- | www/ruby-mechanize/Makefile | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/www/ruby-mechanize/Makefile b/www/ruby-mechanize/Makefile index e2cc41e43ce..ee3724ee3c9 100644 --- a/www/ruby-mechanize/Makefile +++ b/www/ruby-mechanize/Makefile @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.7 2012/03/01 01:24:48 minskim Exp $ +# $NetBSD: Makefile,v 1.8 2012/04/29 16:11:17 taca Exp $ -DISTNAME= mechanize-2.3 +DISTNAME= mechanize-2.4 CATEGORIES= www MAINTAINER= minskim@NetBSD.org @@ -10,12 +10,12 @@ LICENSE= mit PKG_DESTDIR_SUPPORT= user-destdir -DEPENDS+= ${RUBY_PKGPREFIX}-domain_name>=0.5.1:../../net/ruby-domain_name -DEPENDS+= ${RUBY_PKGPREFIX}-mime-types>=1.17:../../mail/ruby-mime-types +DEPENDS+= ${RUBY_PKGPREFIX}-domain_name>=0.5<1:../../net/ruby-domain_name +DEPENDS+= ${RUBY_PKGPREFIX}-mime-types>=1.17<2:../../mail/ruby-mime-types DEPENDS+= ${RUBY_PKGPREFIX}-net-http-digest_auth>=1.1<2:../../www/ruby-net-http-digest_auth -DEPENDS+= ${RUBY_PKGPREFIX}-net-http-persistent>=2.5:../../www/ruby-net-http-persistent +DEPENDS+= ${RUBY_PKGPREFIX}-net-http-persistent>=2.5<3:../../www/ruby-net-http-persistent DEPENDS+= ${RUBY_PKGPREFIX}-nokogiri>=1.4<2:../../textproc/ruby-nokogiri -DEPENDS+= ${RUBY_PKGPREFIX}-ntlm-http>=0.1.1:../../www/ruby-ntlm-http +DEPENDS+= ${RUBY_PKGPREFIX}-ntlm-http>=0.1<1:../../www/ruby-ntlm-http DEPENDS+= ${RUBY_PKGPREFIX}-webrobots>=0.0<1:../../www/ruby-webrobots .include "../../lang/ruby/gem.mk" |