From mboxrd@z Thu Jan  1 00:00:00 1970
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on dcvr.yhbt.net
X-Spam-Level: 
X-Spam-ASN: AS6939 64.71.128.0/18
X-Spam-Status: No, score=-1.9 required=3.0 tests=AWL,BAYES_00,
 MSGID_FROM_MTA_HEADER shortcircuit=no autolearn=unavailable version=3.3.2
Path: news.gmane.org!not-for-mail
From: Eric Wong <normalperson@yhbt.net>
Newsgroups: gmane.comp.lang.ruby.clogger.general
Subject: [ANN] clogger 1.1.0 - more escaping!
Date: Tue, 6 Dec 2011 03:02:59 +0000
Message-ID: <20111206030259.GA1868@dcvr.yhbt.net>
References: <20111206030259.GA1868@dcvr.yhbt.net>
NNTP-Posting-Host: lo.gmane.org
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Trace: dough.gmane.org 1323140606 27580 80.91.229.12 (6 Dec 2011 03:03:26
 GMT)
X-Complaints-To: usenet@dough.gmane.org
NNTP-Posting-Date: Tue, 6 Dec 2011 03:03:26 +0000 (UTC)
To: clogger@librelist.org
Original-X-From: clogger@librelist.org Tue Dec 06 04:03:19 2011
Return-path: <clogger@librelist.org>
Envelope-to: gcrcg-clogger@m.gmane.org
In-Reply-To: <20111206030259.GA1868@dcvr.yhbt.net>
List-Archive: <http://librelist.com/archives/clogger/>
List-Help: <http://librelist.com/help.html>
List-Id: <clogger-public@bogomips.org>
List-Post: <mailto:clogger@librelist.org>
List-Subscribe: <mailto:clogger-subscribe@librelist.com>
List-Unsubscribe: <mailto:clogger-unsubscribe@librelist.com>
Precedence: list
Original-Sender: clogger@librelist.org
Xref: news.gmane.org gmane.comp.lang.ruby.clogger.general:54
Archived-At:
 <http://permalink.gmane.org/gmane.comp.lang.ruby.clogger.general/54>
Received: from zedshaw.xen.prgmr.com ([64.71.167.205]) by lo.gmane.org with
 esmtp (Exim 4.69) (envelope-from <clogger@librelist.org>) id 1RXlJP-0001Gr-6p
 for gcrcg-clogger@m.gmane.org; Tue, 06 Dec 2011 04:03:19 +0100
Received: from zedshaw.xen.prgmr.com (localhost [IPv6:::1]) by
 zedshaw.xen.prgmr.com (Postfix) with ESMTP id BD7BB21CADC for
 <gcrcg-clogger@m.gmane.org>; Tue,  6 Dec 2011 03:07:00 +0000 (UTC)

Changes:

This release fixes potential vulnerabilities when escape
sequences are viewed in certain terminals.

The 0x7F-0xFF byte range is escaped to match behavior of nginx
1.0.9+, as some character sets may have escape characters in
that range.

$cookie_* values are now escaped to be consistent with the
behavior of the $http_cookie value.  All users of $cookie_* in
their log format must upgrade (of course there may be no
Clogger users other than myself, and I don't use $cookie_*)

* http://clogger.rubyforge.org/
* clogger@librelist.org
* git://bogomips.org/clogger.git
* http://clogger.rubyforge.org/NEWS.atom.xml