| Age | Commit message (Collapse) | Author | Files | Lines |
|
|
|
Ruby 3.1 contains the same version of ruby-rexml in it as Ruby 3.0.
|
|
3.2.5 (2021-04-05)
Improvements
* Add more validations to XPath parser.
* require "rexml/document" by default. [GitHub#36][Patch by Koichi ITO]
* Don't add #dclone method to core classes globally. [GitHub#37][Patch by
Akira Matsuda]
* Add more documentations. [Patch by Burdette Lamar]
* Added REXML::Elements#parent. [GitHub#52][Patch by Burdette Lamar]
Fixes
* Fixed a bug that REXML::DocType#clone doesn't copy external ID
information.
* Fixed round-trip vulnerability bugs. See also:
https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/
[HackerOne#1104077][CVE-2021-28965][Reported by Juho Nurminen]
Thanks
* Koichi ITO
* Akira Matsuda
* Burdette Lamar
* Juho Nurminen
|
|
Do not build on Ruby 3.0 since it contains the same version of rexml
gem and conflicts with this package.
Noted by private e-mail from wiz@, thank you!
|
|
ruby-rexml was bundled to ruby base package and removed past.
Ruby 3.0 dose not bundle rexml library any more, so re-add its latest
version now.
REXML
REXML was inspired by the Electric XML library for Java, which features an
easy-to-use API, small size, and speed. Hopefully, REXML, designed with the
same philosophy, has these same features. I've tried to keep the API as
intuitive as possible, and have followed the Ruby methodology for method
naming and code flow, rather than mirroring the Java API.
REXML supports both tree and stream document parsing. Stream parsing is
faster (about 1.5 times as fast). However, with stream parsing, you don't
get access to features such as XPath.
|
|
and now bundled in ruby18-base pacakges.
|
|
host idoru.mine.nu[82.31.78.41] said: 550 sorry,
never heard of you (in reply to RCPT TO command)
|
|
lang/ruby/rubyversion.mk changes.
|
|
|
|
No functional change.
|
|
submit the PR.
|
|
- Fix Iconv::iconv error with "Shift_JIS" processing.
- Fix method name mistake.
- Since encoding modulde would be loaded as needs, it should be load
by "load" instead of "require".
Add dependency to ruby-iconv or ruby-uconv package.
Bump package revision.
|
|
for Ruby packages.
Changes are unknown but it would be huge.
NOTE: ruby18 (Ruby 1.8.1) package bundled rexml 2.7.3.
|
|
|
|
|
|
based on Java Electric XML.
This package is based on PR pkg/21282 by <rasputin at idoru dot mine dot nu>
and discussion between he and me.
|