sync blead with Update Archive::Extract 0.34
[p5sagit/p5-mst-13.2.git] / lib / CGI / Changes
CommitLineData
0106d518 1 Version 3.43
2 1. Documentation patch from MARKSTOS@cpan.org to replace all occurrences of
3 "new CGI" with CGI->new()" to reflect best perl practices.
4 2. Patch from Stepan Kasal to fix utf-8 related problems in perl 5.10
f8a128a9 5
6 Version 3.42
7 1. Added patch from Renee Baecker that makes it possible to subclass
8 CGI::Pretty.
9 2. Added patch from Nicholas Clark to allow ~ characters in temporary directories.
10 3. Added patch from Renee Baecker that fixes the inappropriate escaping of fields
11 in multipart headers.
12
e1c70484 13 Version 3.41
14 1. Fix url() returning incorrect path when query string contains escaped newline.
15 2. Added additional windows temporary directories and environment variables, courtesy patch from Renee Baecker
16 3. Added a handle() method to the lightweight upload
17 filehandles. This method returns a real IO::Handle object.
18 4. Added patch from Tony Vanlingen to fix deep recursion warnings in CGI::Pretty.
19
20 Version 3.40
21 1. Fixed CGI::Fast docs to eliminate references to a "special"
22 version of Perl.
23 2. Makefile.PL now depends on FCGI so that CGI::Fast installs properly.
24 3. Fix script_name() call from Stephane Chazelas.
25
26 Version 3.39
27 1. Fixed regression in "exists" function when using tied interface to CGI via $q->Vars.
28
29 Version 3.38
30 1. Fix annoying warning in http://rt.cpan.org/Ticket/Display.html?id=34551
31 2. Added nobr() function http://rt.cpan.org/Ticket/Display.html?id=35377
32 3. popup_menu() allows multiple items to be selected by default, satisfying
33 http://rt.cpan.org/Ticket/Display.html?id=35376
34 4. Patch from Renee Backer to avoid doubled <http-equiv> headers.
35 5. Fixed documentation bug that describes what happens when a
36 parameter is empty (e.g. "?test1=").
37 6. Fixed minor warning described at http://rt.cpan.org/Public/Bug/Display.html?id=36435
38 7. Fixed overlap of attribute and parameter space described in http://rt.perl.org/rt3//Ticket/Display.html?id=24294
39
40 Version 3.37
41 1. Fix pragmas so that they persist over modperl invocations (e.g. RT 34761)
42 2. Fixed handling of chunked multipart uploads; thanks to Michael Bernhardt
43 who reported and fixed the problem.
44
45 Version 3.36
46 1. Fix CGI::Cookie to support cookies that are separated by "," instead of ";".
47
86de2d7d 48 Version 3.35
49 1. Resync with bleadperl, primarily fixing a bug in parsing semicolons in uploaded filenames.
50
51 Version 3.34
52 1. Handle Unicode %uXXXX escapes properly -- patch from DANKOGAI@cpan.org
53 2. Fix url() method to not choke on path names that contain regex characters.
54
55 Version 3.33
56 1. Remove uninit variable warning when calling url(-relative=>1)
57 2. Fix uninit variable warnings for two lc calls
58 3. Fixed failure of tempfile upload due to sprintf() taint failure in perl 5.10
59
60 Version 3.32
61 1. Patch from Miguel Santinho to prevent sending premature headers under mod_perl 2.0
62
63 Version 3.31
64 1. Patch from Xavier Robin so that CGI::Carp issues a 500 Status code rather than a 200 status code.
65 2. Patch from Alexander Klink to select correct temporary directory in OSX Leopard so that upload works.
66 3. Possibly fixed "wrapped pack" error on 5.10 and higher.
67
68 Version 3.30
69 1. Patch from Mike Barry to handle POSTDATA in the same way as PUT.
70 2. Patch from Rafael Garcia-Suarez to correctly reencode unicode values as byte values.
71
681699b9 72 Version 3.29
73 1. The position of file handles is now reset to zero when CGI->new is called.
74 (Mark Stosberg)
75 2. uploadInfo() now works across multiple object instances. Also, the first
76 tests for uploadInfo() were added as part of the fix. (CPAN bug 11895, with
77 contributions from drfrench and Mark Stosberg).
78
2c454cbd 79 Version 3.28
80 1. Applied patch from Allen Day that makes Cookie parsing RFC2109 compliant
81 (attribute/values can be separated by commas as well as semicolons).
82 2. Applied patch from Stephan Struckmann that allows script_name() to be set correctly.
83 3. Fixed problem with url(-full) in which port number appears twice.
84
8869a4b7 85 Version 3.27
86 1. Applied patch from Steve Taylor that allows checkbox_groups to be
87 disabled with a new -disabled=> option.
88
89 Version 3.26
90 1. Fixed alternate stylesheet behavior so that it is insensitive to order of declarations.
91 2. Patch from John Binns to allow users to provide a callback to CGI::Carp.
92 3. Added "~" as an unreserved character in escape().
93 4. Patch from Chris Fedde to prevent HTTP_HOST from inhibiting SERVER_PORT in url() generation.
94 5. Fixed outdated documentation (and behavior) of -language in start_html -script option.
95 6. Fixed bug in seconds calculation in CGI::Util::expire_calc.
96
0664a57d 97 Version 3.25
98 1. Fixed the link to the Netscape frames page.
99 2. Added ability to specify an alternate stylesheet.
8869a4b7 100 3. Add support for XForms POST submssion both as application/xml or as multipart/related
0664a57d 101
102 Version 3.24
103 1. In startform(), if request_uri() returns undef, then falls back
104 to self_url(). This should rarely happen except when run outside of
105 the CGI environment.
106 2. image button alignment options were mistakenly being capitalized, causing xhtml validation to fail.
107
108 Version 3.23
109 1. Typo in upload() persisted, now fixed for real. Thanks to
110 Emanuele Zeppieri for correct patch and regression test.
111
9f9736a1 112 Version 3.22
113 1. Typo in upload() function broke uploads. Now fixed (CPAN bug 21126).
114
fc786e8b 115 Version 3.21
116 1. Don't try to read data at all when POST > $POST_MAX.
117 2. Fixed bug that caused $cgi->param('name',undef,'value') to unset param('name') entirely.
118 3. Fixed bug in which upload() sometimes returns empty. (CPAN bug #12694).
119 4. Incorporated patch from BURAK@cpan.org to support HTTPcookies (CPAN bug 21019).
120
adb86593 121 Version 3.20
122 1. Patch from David Wheeler for CGI::Cookie->bake(). Uses mod_perl headers_out->add()
123 rather than headers_out->set().
124 2. Fixed problem identified by Andrei Voronkov in which start_form() output was screwed
125 up when initial argument begins with a dash and subsequent arguments do not.
126 3. Quashed uninitialized variable warnings coming from script_name(), url() and other
127 functions that require access to the PATH_INFO environment variable.
128
cb3b230c 129 Version 3.19
130 1. Added patch from Stephen Frost that allows one to suppress use of the temp file that is
131 created during uploads.
132 2. Fixed problem noted by Martin Foster in which regular expression meta-character terms
133 in the path information were not quoted, causing URL parsing
134 to fail on URLs that contained metacharacters (such as +).
135 3. More fixes to the url() method.
136 4. Removed "hack to fix broken PATH_INFO in MSII".
137
138 Version 3.18
139 1. Doc typo fixes.
140 2. Patch from Steve Peters to default the document type to match the charset.
141 3. Fixed param() so that param(-name=>'foo',-values=>[]) sets the parameter to empty list.
142
681699b9 143 Version 3.17 Fri Feb 24 14:01:27 EST 2006
144 1. Added patch from Mike Hanafey which caused 0 arguments to CGI::Cookie->new() to
145 be treated as empty.
146 2. Patch to CGI::Carp from Peter Whaite to fix the unfixable problem of CGI::Carp
147 not behaving correctly in an eval() context.
148 3. CGI::Fast->new() calls CGI->_reset_globals to avoid contamination of one session
149 with another's variables.
150 4. Fixed upload failure on files that contain semicolons in their names.
151
55b5d700 152 Version 3.16 Wed Feb 8 13:29:11 EST 2006
153 1. header() -charset option now works even when the MIME type is not "text".
154 2. Fixed documentation for cookie() function and fastCGI.
155 3. Upload filehandles now only closed automatically on Windows systems.
156 4. Apache::Cookie compatibility fix from David Wheeler
157 5. CGI::Carp->fatalsToBrowser() does not work correctly with
158 mod_perl 2. No workaround is known.
159 6. Fixed text status code associated with 302 redirects. Should be "Found"
160 but was "Moved".
161 7. Fixed charset in start_html() and header() to be in synch.
162
edc47407 163 Version 3.15 Wed Dec 7 15:13:22 EST 2005
164 1. Remove extraneous "?" from self_url() when URI contains a ? but no query string.
165
1f426928 166 Version 3.14 Tue Dec 6 17:12:03 EST 2005
167 1. Fixed broken scrolling_list() select attribute.
168
0a9bdad4 169 Version 3.13
170 1. Removed extraneous empty "?" from end of self_url().
171
172 Version 3.12
173 1. Fixed virtual_port so that it works properly with https protocol.
174 2. Fixed documentation for upload_hook().
175 3. Added POSTDATA documentation.
176 4. Made upload_hook() work in function-oriented mode.
177 5. Fixed POST_MAX behavior so that it doesn't cause client to hang.
178 6. Disabled automatic tab indexes and added new -tabindex pragma to
179 turn automatic indexes back on.
180 7. The url() and self_url() methods now work better in the context of Apache
181 mod_rewrite. Be advised that path_info() may give you confusing results
182 when mod_rewrite is active because Apache calculates the path info *after*
183 rewriting. This is mostly worked around in url() and self_url(), but you
184 may notice some anomalies.
185 8. Removed empty (and non-validating) <div> from code emitted by end_form().
186 9. Fixed CGI::Carp to work correctly with Mod_perl 1.29 in an Apache 2 environment.
187 10. Setting $CGI::TMPDIRECTORY should now be effective.
188
7dc108d1 189 Version 3.11
190 1. Killed warning in CGI::Cookie about MOD_PERL_API_VERSION
191 2. Fixed append() so that it works in function mode.
192 3. Workaround for a bug that appears in Apache2 versions through 2.0.54
193 in which SCRIPT_NAME and PATH_INFO are incorrect if the additional path_info
194 contains a double slash. This workaround will handle the common case of
195 http://mysite.com/cgi-bin/log.cgi/http://www.some.other.site/args, but will
196 not handle the uncommon case of a ScriptAlias directive that adds additional
197 path information to the end of the translated URI.
198
70194bd6 199 Version 3.10
200 1. Added Apache2::RequestIO, which is necessary for mp2 interoperability.
201
202 Version 3.09
203 1. Fixed tabindex="0" when using CGI to create forms without a prior start_html
204 2. Removed warning about non-numeric MOD_PERL_API_VERSION.
205
741ff09d 206 Version 3.08
207 1. update support for mod_perl 2.0. versions prior to
208 mod_perl 1.999_22 (2.0.0-RC5) are no longer supported.
209
976c4ade 210 Version 3.07
211 1. Fixed typo in mod_perl detection.
212
213 Version 3.06
214
215 1. Fixed bare call to script() in start_html
216 2. Moved Fh::DESTROY out of autoloaded functions so as to avoid
217 clobbering $@ when CGI functions are executed in an eval{}
218 context.
219 3. mod_perl 2.0 version detection patch in CGI::Cookie provided by
220 Allen Day.
221 4. autoEscape() flag is now respected when generating extra
222 attributes.
223 5. Tests for *tag start/end generation from Shlomi Fish.
224 6. Support for can() method provided by Ron Savage.
225 7. Fix for lang='' when outputting XHTML.
226 8. Added support for chunked transfer encoding, as suggested by
227 Hakan Ardo
228 9. Fixed clobbering of row and column headers in tableized radio
229 and checkbox groups, as reported by Nicolas Thierry-Mieg.
230 10. <Label> tags are now associated with form elements, as suggested
231 by accessibility guidelines.
232 11. The <?xml> directive produced by start_html is now turned off by
233 default and the charset is specified in a <meta> directive. Apparently
234 IE6 (and maybe some versions of Opera) were getting confused by this.
235 12. Support for tab indexes.
236 13. Retired the HTML docs. The POD docs are now primary documentation.
237 14. CGI::Carp now correctly detects and handles Apache::Dispatch.
238 15. CGI::Util::utf8_chr now correctly sets the UTF8 flag on 5.006 or
239 higher perls (fix courtesy Slaven Rezic).
240
241
242 Version 3.05
243
244 1. Fixed uninitialized variable warning on start_form() when running
245 from command line.
246 2. Fixed CGI::_set_attributes so that attributes with a - are handled
247 correctly.
248 3. Fixed CGI::Carp::die() so as to avoid problems from _longmess()
249 clobbering @_.
250 4. If HTTP_X_FORWARDED_HOST is defined (i.e. running under a proxy),
251 the various functions that return HOST will use that instead.
252 5. Fix for undefined utf8() call in CGI::Util.
253 6. Changed the call to warningsToBrowser() in
254 CGI::Carp::fatalsToBrowser to call only after HTTP header is sent
255 (thanks to Didier Lebrun for noticing).
256 7. Patches from Dan Harkless to make CGI.pm validatable against HTML
257 3.2.
258 8. Fixed an extraneous "foo=bar" appearing when extra style
259 parameters passed to start_html;
260 9. Fixed cross-site scripting bug in startform() pointed out by Dan
261 Harkless.
262 10. Fixed documentation to discuss list context behavior of
263 form-element generators explicitly.
264 11. Fixed incorrect results from end_form() when called in OO manner.
265 12. Fixed query string stripping in order to handle URLs containing
266 escaped newlines.
267 13. During server push, set NPH to 0 rather than 1. This is supposed
268 to fix problems with Apache.
269 14. Fixed incorrect processing of multipart form fields that contain
270 embedded quotes. There's still the issue of how to handle ones
271 that contain embedded semicolons, but no one has complained (yet).
272 15. Fixed documentation bug in -style argument to start_html()
273 16. Added -status argument to redirect().
274
275 Version 3.04
276
277 1. Fixed the problem with mod_perl crashing when "defaults" button
278 pressed.
279
280 Version 3.03
281
282 1. Fix upload hook functionality
283 2. Workaround for CGI->unescape_html()
284 3. Bumped version numbers in CGI::Fast and CGI::Util for 5.8.3-tobe
285
286 Version 3.02
287
288 1. Bring in Apache::Response just in case.
289 2. File upload on EBCDIC systems now works.
290
291 Version 3.01
292
293 1. No fix yet for upload failures when running on EBCDIC server.
294 2. Fixed uninitialized glob warnings that appeared when file
295 uploading under perl 5.8.2.
296 3. Added patch from Schlomi Fish to allow debugging of PATH_INFO from
297 command line.
298 4. Added patch from Steve Hay to correctly unlink tmp files under
299 mod_perl/windows
300 5. Added upload_hook functionality from Jamie LeTaul
301 6. Workarounds for mod_perl 2 IO issues. Check that file upload and
302 state saving still working.
303 7. Added code for underreads.
304 8. Fixed misleading description of redirect() and relative URLs in
305 the POD docs.
306 9. Workaround for weird interaction of CGI::Carp with Safe module
307 reported by William McKee.
308 10. Added patches from Ilmari Karonen to improve behavior of
309 CGI::Carp.
310 11. Fixed documentation error in -style argument.
311 12. Added virtual_port() method for finding out what port server is
312 listening on in a virtual-host aware fashion.
313
314 Version 3.00
315
316 1. Patch from Randal Schwartz to fix bug introduced by cross-site
317 scripting vulnerability "fix."
318 2. Patch from JFreeman to replace UTF-8 escape constant of 0xfe with
319 0xfc. Hope this is right!
320
321 Version 2.99
322
323 1. Patch from Steve Hay to fix extra Content-type: appearing on
324 browser screen when FatalsToBrowser invoked.
325 2. Patch from Ewann Corvellec to fix cross-site scripting
326 vulnerability.
327 3. Fixed tmpdir routine for file uploading to solve problem that
328 occurs under mod_perl when tmpdir is writable at startup time, but
329 not at session time.
330
331 Version 2.98
332
333 1. Fixed crash in Dump() function.
334
335 Version 2.97
336
337 1. Sigh. Uploaded wrong 2.96 to CPAN.
338
339 Version 2.96
340
341 1. More bugfixes to the -style argument.
342
343 Version 2.95
344
345 1. Fixed bugs in start_html(-style=>...) support introduced in 2.94.
346
347 Version 2.94
348
349 1. Removed warning from reset() method.
350 2. Moved
351
352 and tags into the :html3 group. Hope this removes undefined CGI::Area
353 errors.
354
355 Changed CGI::Carp to play with mod_perl2 and to (hopefully) restore
356 reporting of compile-time errors.
357
358 Fixed potential deadlock between web server and CGI.pm when aborting
359 a read due to POST_MAX (reported by Antti Lankila).
360
361 Fixed issue with tag-generating function not incorporating content
362 when first variable undef.
363
364 Fixed cross-site scripting bug reported by obscure.
365
366 Fixed Dump() function to return correctly formed XHTML - bug
367 reported by Ralph Siemsen.
368
369 Version 2.93
370
371 1. Fixed embarassing bug in mp1 support.
372
373 Version 2.92
374
375 1. Fix to be P3P compliant submitted from MPREWITT.
376 2. Added CGI->r() API for mod_perl1/mod_perl2.
377 3. Fixed bug in redirect() that was corrupting cookies.
378 4. Minor fix to behavior of reset() button to make it consistent with
379 submit() button (first time this has been changed in 9 years).
380 5. Patch from Dan Kogai to handle UTF-8 correctly in 5.8 and higher.
381 6. Patch from Steve Hay to make CGI::Carp's error messages appear on
382 MSIE browsers.
383 7. Added Yair Lenga's patch for non-urlencoded postings.
384 8. Added Stas Bekman's patches for mod_perl 2 compatibility.
385 9. Fixed uninitialized escape behavior submitted by William Campbell.
386 10. Fixed tied behavior so that you can pass arguments to tie()
387 11. Fixed incorrect generation of URLs when the path_info contains +
388 and other odd characters.
389 12. Fixed redirect(-cookies=>$cookie) problem.
390 13. Fixed tag generation bug that affects -javascript passed to
391 start_html().
392
393 Version 2.91
394
395 1. Attribute generation now correctly respects the value of
396 autoEscape().
397 2. Fixed endofrm() syntax error introduced by Ben Edgington's patch.
398
399 Version 2.90
400
401 1. Fixed bug in redirect header handling.
402 2. Added P3P option to header().
403 3. Patches from Alexey Mahotkin to make CGI::Carp work correctly with
404 object-oriented exceptions.
405 4. Removed inaccurate description of how to set multiple cookies from
406 CGI::Cookie pod file.
407 5. Patch from Kevin Mahony to prevent running out of filehandles when
408 uploading lots of files.
409 6. Documentation enhancement from Mark Fisher to note that the
410 import_names() method transforms the parameter names into valid
411 Perl names.
412 7. Patch from Dan Harkless to suppress lang attribute in <html> tag
413 if specified as a null string.
414 8. Patch from Ben Edgington to fix broken XHTML-transitional 1.0
415 validation on endform().
416 9. Custom html header fix from Steffen Beyer (first letter correctly
417 upcased now)
418 10. Added a -verbatim option to stylesheet generation from Michael
419 Dickson
420 11. Faster delete() method from Neelam Gupta
421 12. Fixed broken Cygwin support.
422 13. Added empty charset support from Bradley Baetz
423 14. Patches from Doug Perham and Kevin Mahoney to fix file upload
424 failures when uploaded file is a multiple of 4096.
425
426 Version 2.89
427
428 1. Fixed behavior of ACTION tag when POSTING to a URL that has a
429 query string.
430 2. Added Patch from Michael Rommel to handle multipart/mixed uploads
431 from Opera
432
433 Version 2.88
434
435 1. Fixed problem with uploads being refused under Perl 5.8 when under
436 Taint mode.
437 2. Fixed uninitialized variable warnings under Perl 5.8.
438 3. Fixed CGI::Pretty regression test failures.
439
440 Version 2.87
441
442 1. Security hole patched: when processing multipart/form-data
443 postings, most arguments were being untainted silently. Returned
444 arguments are now tainted correctly. This may cause some scripts
445 to fail that used to work (thanks to Nick Cleaton for pointing
446 this out and persisting until it was fixed).
447 2. Update for mod_perl 2.0.
448 3. Pragmas such as -no_xhtml are now respected in mod_perl
449 environment.
450
451 Version 2.86
452
453 1. Fixes for broken CGI::Cookie expiration dates introduced in 2.84.
454
455 Version 2.85
456
457 1. Fix for broken autoEscape function introduced in 2.84.
458
459 Version 2.84
460
461 1. Fix for failed file uploads on Cygwin platforms.
462 2. HTML escaping code now replaced 0x8b and 0x9b with unicode
463 references < and *#8250;
464
465 Version 2.83
466
467 1. Fixed autoEscape() documentation inconsistencies.
468 2. Patch from Ville Skyttä to fix a number of XHTML inconsistencies.
469 3. Added Max-Age to list of CGI::Cookie headers.
470
471 Version 2.82
472
473 1. Patch from Rudolf Troller to add attribute setting and option
474 groups to form fields.
475 2. Patch from Simon Perreault for silent crashes when using CGI::Carp
476 under mod_perl.
477 3. Patch from Scott Gifford allows you to set the program name for
478 CGI::Carp.
479
480 Version 2.81
481
482 1. Removed extraneous slash from end of stylesheet tags generated by
483 start_html in non-XHTML mode.
484 2. Changed behavior of CGI::Carp with respect to eval{} contexts so
485 that output behaves properly in mod_perl environments.
486 3. Fixed default DTD so that it validates with W3C validator.
487
488 Version 2.80
489
490 1. Fixed broken messages in CGI::Carp.
491 2. Changed checked="1" to checked="checked" for real XHTML
492 compatibility.
493 3. Resurrected REQUEST_URI code so that url() works correctly with
494 multiviews.
495
496 Version 2.79
497
498 1. Changes to CGI::Carp to avoid "subroutine redefined" error
499 messages.
500 2. Default DTD is now XHTML 1.0 Transitional
501 3. Patches to support all HTML4 tags.
502
503 Version 2.78
504
505 1. Added ability to change encoding in <?xml> assertion.
506 2. Fixed the old escapeHTML('CGI') ne "CGI" bug
507 3. In accordance with XHTML requirements, there are no longer any
508 minimized attributes, such as "checked".
509 4. Patched bug which caused file uploads of exactly 4096 bytes to be
510 truncated to 4094 (thanks to Kevin Mahony)
511 5. New tests and fixes to CGI::Pretty (thanks to Michael Schwern).
512
513 Version 2.77
514
515 1. No new features, but released in order to fix an apparent CPAN
516 bug.
517
518 Version 2.76
519
520 1. New esc.t regression test for EBCDIC translations courtesy Peter
521 Prymmer.
522 2. Patches from James Jurach to make compatible with FCGI-ProcManager
523 3. Additional fields passed to header() (like -Content_disposition)
524 now honor initial capitalization.
525 4. Patch from Andrew McNaughton to handle utf-8 escapes (%uXXXX
526 codes) in URLs.
527
528 Version 2.752
529
530 1. Syntax error in the autoloaded Fh::new() subroutine.
531 2. Better error reporting in autoloaded functions.
532
533 Version 2.751
534
535 1. Tiny tweak to filename regular expression function on line 3355.
536
537 Version 2.75
538
539 1. Fixed bug in server push boundary strings (CGI.pm and CGI::Push).
540 2. Fixed bug that occurs when uploading files with funny characters
541 in the name
542 3. Fixed non-XHTML-compliant attributes produced by textfield()
543 4. Added EPOC support, courtesy Olaf Flebbe
544 5. Fixed minor XHTML bugs.
545 6. Made escape() and unescape() symmetric with respect to EBCDIC,
546 courtesy Roca, Ignasi <ignasi.roca@fujitsu.siemens.es>
547 7. Removed uninitialized variable warning from CGI::Cookie, provided
548 by Atipat Rojnuckarin <rojnuca@yahoo.com>
549 8. Fixed bug in CGI::Pretty that causes it to print partial end tags
550 when the $INDENT global is changed.
551 9. Single quotes are changed to character entity ' for compatibility
552 with URLs.
553
554 Version 2.74
555
556 September 13, 2000
557 1. Quashed one-character bug that caused CGI.pm to fail on file
558 uploads.
559
560 Version 2.73
561
562 September 12, 2000
563 1. Added -base to the list of arguments accepted by url().
564 2. Fixes to XHTML support.
565 3. POST parameters no longer show up in the Location box.
566
567 Version 2.72
568
569 August 19, 2000
570 1. Fixed the defaults button so that it works again
571 2. Charset is now correctly saved and restored when saving to files
572 3. url() now works correctly when given scripts with %20 and other
573 escapes in the additional path info. This undoes a patch
574 introduced in version 2.47 that I no longer understand the
575 rationale for.
576
577 Version 2.71
578
579 August 13, 2000
580 1. Newlines in the value attributes of hidden fields and other form
581 elements are now escaped when using ISO-Latin.
582 2. Inline script and style sections are now protected as CDATA
583 sections when XHTML mode is on (the default).
584
585 Version 2.70
586
587 August 4, 2000
588 1. Fixed bug in scrolling_list() which omitted a space in front of
589 the "multiple" attribute.
590 2. Squashed the "useless use of string in void context" message from
591 redirects.
592
593 Version 2.69
594
595 1. startform() now creates default ACTION for POSTs as well as GETs.
596 This may break some browsers, but it no longer violates the HTML
597 spec.
598 2. CGI.pm now emits XHTML by default. Disable with -no_xhtml.
599 3. We no longer interpret &#ddd sequences in non-latin character
600 sets.
601
602 Version 2.68
603
604 1. No longer attempts to escape characters when dealing with non
605 ISO-8861 character sets.
606 2. checkbox() function now defaults to using -value as its label,
607 rather than -name. The current behavior is what has been
608 documented from the beginning.
609 3. -style accepts array reference to incorporate multiple stylesheets
610 into document.
611
612 1. Fixed two bugs that caused the -compile pragma to fail with a
613 syntax error.
614
615 Version 2.67
616
617 1. Added XHTML support (incomplete; tags need to be lowercased).
618 2. Fixed CGI/Carp when running under mod_perl. Probably broke in
619 other contexts.
620 3. Fixed problems when passing multiple cookies.
621 4. Suppress warnings from _tableize() that were appearing when using
622 -w switch with radio_group() and checkbox_group().
623 5. Support for the header() -attachment argument, which can give
624 pages a default file name when saving to disk.
625
626 Version 2.66
627
628 1. 2.65 changes in make_attributes() broke HTTP header functions
629 (including redirect), so made it context sensitive.
630
631 Version 2.65
632
633 1. Fixed regression tests to skip tests that require implicit fork on
634 machines without fork().
635 2. Changed make_attributes() to automatically escape any HTML
636 reserved characters.
637 3. Minor documentation fix in javascript example.
638
639 Version 2.64
640
641 1. Changes introduced in 2.63 broke param() when retrieving parameter
642 lists containing only a single argument. This is now fixed.
643 2. self_url() now defaults to returning parameters delimited with
644 semicolon. Use the pragma -oldstyle_urls to get the old "&"
645 delimiter.
646
647 Version 2.63
648
649 1. Fixed CGI::Push to pull out parameters correctly.
650 2. Fixed redirect() so that it works with default character set
651 3. Changed param() so as to returned empty string '' when referring
652 to variables passed in query strings like 'name1=&name2'
653
654 Version 2.62
655
656 1. Fixed broken ReadParse() function, and added regression tests
657 2. Fixed broken CGI::Pretty, and added regression tests
658
659 Version 2.61
660
661 1. Moved more functions from CGI.pm proper into CGI/Util.pm.
662 CGI/Cookie should now be standalone.
663 2. Disabled per-user temporary directories, which were causing grief.
664
665 Version 2.60
666
667 1. Fixed junk appearing in autogenerated HTML functions when using
668 object-oriented mode.
669
670 Version 2.59
671
672 1. autoescape functionality breaks too much existing code, removed
673 it.
674 2. use escapeHTML() manually
675
676 Version 2.58
677
678 This is the release version of 2.57.
679
680 Version 2.57
681
682 1. Added -debug pragma and turned off auto reading of STDIN.
683 2. Default DTD updated to HTML 4.01 transitional.
684 3. Added charset() method and the -charset argument to header().
685 4. Fixed behavior of escapeHTML() to respect charset() and to escape
686 nasty Windows characters (thanks to Tom Christiansen).
687 5. Handle REDIRECT_QUERY_STRING correctly.
688 6. Removed use_named_parameters() because of dependency problems and
689 general lameness.
690 7. Fixed problems with bad HREF links generated by url(-relative=>1)
691 when the url is like /people/.
692 8. Silenced a warning on upload (patch provided by Jonas Liljegren)
693 9. Fixed race condition in CGI::Carp when errors occur during parsing
694 (patch provided by Maurice Aubrey).
695 10. Fixed failure of url(-path_info=>1) when path contains % signs.
696 11. Fixed warning from CGI::Cookie when receiving foreign cookies that
697 don't use name=value format.
698 12. Fixed incompatibilities with file uploading on VMS systems.
699
700 Version 2.56
701
702 1. Fixed bugs in file upload introduced in version 2.55
703 2. Fixed long-standing bug that prevented two files with identical
704 names from being uploaded.
705
706 Version 2.55
707
708 1. Fixed cookie regression test so as not to produce an error.
709 2. Fixed path_info() and self_url() to work correctly together when
710 path_info() modified.
711 3. Removed manify warnings from CGI::{Switch,Apache}.
712
713 Version 2.54
714
715 1. This will be the last release of the monolithic CGI.pm module.
716 Later versions will be modularized and optimized.
717 2. DOMAIN tag no longer added to cookies by default. This will break
718 some versions of Internet Explorer, but will avoid breaking
719 networks which use host tables without fully qualified domain
720 names. For compatibility, please always add the -domain tag when
721 creating cookies.
722 3. Fixed escape() method so that +'s are treated correctly.
723 4. Updated CGI::Pretty module.
724
725 Version 2.53
726
727 1. Forgot to upgrade regression tests before releasing 2.52. NOTHING
728 ELSE HAS CHANGED IN LIBRARY
729
730 Version 2.52
731
732 1. Spurious newline in checkbox() routine removed. (courtesy John
733 Essen)
734 2. TEXTAREA linebreaks now respected in dump() routine. (courtesy
735 John Essen)
736 3. Patches for DOS ports (courtesy Robert Davies)
737 4. Patches for VMS
738 5. More fixes for cookie problems
739 6. Fix CGI::Carp so that it doesn't affect eval{} blocks (courtesy
740 Byron Brummer)
741
742 Version 2.51
743
744 1. Fixed problems with cookies not being remembered when sent to IE
745 5.0 (and Netscape 5.0 too?)
746 2. Numerous HTML compliance problems in cgi_docs.html; fixed thanks
747 to Michael Leahy
748
749 Version 2.50
750
751 1. Added a new Vars() method to retrieve all parameters as a tied
752 hash.
753 2. Untainted tainted tempfile name so that script doesn't fail on
754 terminal unlink.
755 3. Made picking of upload tempfile name more intelligent so that
756 doesn't fail in case of name collision.
757 4. Fixed handling of expire times when passed an absolute timestamp.
758 5. Changed dump() to Dump() to avoid name clashes.
759
760 Version 2.49
761
762 1. Fixes for FastCGI (globals not getting reset)
763 2. Fixed url() to correctly handle query string and path under
764 MOD_PERL
765
766 Version 2.48
767
768 1. Reverted detection of MOD_PERL to avoid breaking PerlEX.
769
770 Version 2.47
771
772 1. Patch to fix file upload bug appearing in IE 3.01 for
773 Macintosh/PowerPC.
774 2. Replaced use of $ENV{SCRIPT_NAME} with $ENV{REQUEST_URI} when
775 running under Apache, to fix self-referencing URIs.
776 3. Fixed bug in escapeHTML() which caused certain constructs, such as
777 CGI->image_button(), to fail.
778 4. Fixed bug which caused strong('CGI') to fail. Be careful to use
779 CGI::strong('CGI') and not CGI->strong('CGI'). The latter will
780 produce confusing results.
781 5. Added upload() function, as a preferred replacement for the
782 "filehandle as string" feature.
783 6. Added cgi_error() function.
784 7. Rewrote file upload handling to return undef rather than dieing
785 when an error is encountered. Be sure to call cgi_error() to find
786 out what went wrong.
787
788 Version 2.46
789
790 1. Fix for failure of the "include" tests under mod_perl
791 2. Added end_multipart_form to prevent failures during qw(-compile
792 :all)
793
794 Version 2.45
795
796 1. Multiple small documentation fixes
797 2. CGI::Pretty didn't get into 2.44. Fixed now.
798
799 Version 2.44
800
801 1. Fixed file descriptor leak in upload function.
802 2. Fixed bug in header() that prevented fields from containing double
803 quotes.
804 3. Added Brian Paulsen's CGI::Pretty package for pretty-printing
805 output HTML.
806 4. Removed CGI::Apache and CGI::Switch from the distribution.
807 5. Generated start_* shortcuts so that start_table(), end_table(),
808 start_ol(), end_ol(), and so forth now work (see the docs on how
809 to enable this feature).
810 6. Changed accept() to Accept(), sub() to Sub(). There's still a
811 conflict with reset(), but this will break too many existing
812 scripts!
813
814 Version 2.43
815
816 1. Fixed problem with "use strict" and file uploads (thanks to Peter
817 Haworth)
818 2. Fixed problem with not MSIE 3.01 for the power_mac not doing file
819 uploads right.
820 3. Fixed problem with file upload on IIS 4.0 when authorization in
821 use.
822 4. -content_type and '-content-type' can now be provided to header()
823 as synonyms for -type.
824 5. CGI::Carp now escapes the ampersand BEFORE escaping the > and <
825 signs.
826 6. Fixed "not an array reference" error when passing a hash reference
827 to radio_group().
828 7. Fixed non-removal of uploaded TMP files on NT platforms which
829 occurs when server runs on non-C drive (thanks to Steve Kilbane
830 for finding this one).
831
832 Version 2.42
833
834 1. Too many screams of anguish at changed behavior of url(). Is now
835 back to its old behavior by default, with options to generate all
836 the variants.
837 2. Added regression tests. "make test" now works.
838 3. Documentation fixes.
839 4. Fixes for Macintosh uploads, but uploads STILL do not work pending
840 changes to MacPerl.
841
842 Version 2.41
843
844 1. url() method now includes the path info. Use script_name() to get
845 it without path info().
846 2. Changed handling of empty attributes in HTML tag generation. Be
847 warned! Use table({-border=>undef}) rather than
848 table({-border=>''}).
849 3. Changes to allow uploaded filenames to be compared to other
850 strings with "eq", "cmp" and "ne".
851 4. Changes to allow CGI.pm to coexist more peacefully with
852 ActiveState PerlEX.
853 5. Changes to prevent exported variables from clashing when importing
854 ":all" set in combination with cookies.
855
856 Version 2.40
857
858 1. CGI::Carp patched to work better with mod_perl (thanks to Chris
859 Dean).
860 2. Uploads of files whose names begin with numbers or the Windows
861 \\UNC\shared\file nomenclature should no longer fail.
862 3. The <STYLE> tag (for cascading style sheets) now generates the
863 required TYPE attribute.
864 4. Server push primitives added, thanks to Ed Jordan.
865 5. Table and other HTML3 functions are now part of the :standard set.
866 6. Small documentation fixes.
867
868 TO DO:
869 1. Do something about the DTD mess. The module should generate
870 correct DTDs, or at least offer the programmer a way to specify
871 the correct one.
872 2. Split CGI.pm into CGI processing and HTML-generating modules.
873 3. More robust file upload (?still not working on the Macintosh?).
874 4. Bring in all the HTML4 functionality, particular the accessibility
875 features.
876
877 Version 2.39
878
879 1. file uploads failing because of VMS patch; fixed.
880 2. -dtd parameter was not being properly processed.
881
882 Version 2.38
883
884 I finally got tired of all the 2.37 betas and released 2.38. The main
885 difference between this version and the last 2.37 beta (2.37b30) are
886 some fixes for VMS. This should allow file upload to work properly on
887 all VMS Web servers.
888
889 Version 2.37, various beta versions
890
891 1. Added a CGI::Cookie::parse() method for lucky mod_perl users.
892 2. No longer need separate -values and -labels arguments for
893 multi-valued form elements.
894 3. Added better interface to raw cookies (fix courtesy Ken Fox,
895 kfox@ford.com)
896 4. Added param_fetch() function for direct access to parameter list.
897 5. Fix to checkbox() to allow for multi-valued single checkboxes
898 (weird problem).
899 6. Added a compile() method for those who want to compile without
900 importing.
901 7. Documented the import pragmas a little better.
902 8. Added a -compile switch to the use clause for the long-suffering
903 mod_perl and Perl compiler users.
904 9. Fixed initialization routines so that FileHandle and type globs
905 work correctly (and hash initialization doesn't fail!).
906 10. Better deletion of temporary files on NT systems.
907 11. Added documentation on escape(), unescape(), unescapeHTML() and
908 unescapeHTML() subroutines.
909 12. Added documentation on creating subclasses.
910 13. Fixed problem when calling $self->SUPER::foo() from inheriting
911 subclasses.
912 14. Fixed problem using filehandles from within subroutines.
913 15. Fixed inability to use the string "CGI" as a parameter.
914 16. Fixed exponentially growing $FILLUNIT bug
915 17. Check for undef filehandle in read_from_client()
916 18. Now requires the UNIVERSAL.pm module, present in Perl 5.003_7 or
917 higher.
918 19. Fixed problem with uppercase-only parameters being ignored.
919 20. Fixed vanishing cookie problem.
920 21. Fixed warning in initialize_globals() under mod_perl.
921 22. File uploads from Macintosh versions of MSIE should now work.
922 23. Pragmas now preceded by dashes (-nph) rather than colons (:nph).
923 Old style is supported for backward compatability.
924 24. Can now pass arguments to all functions using {} brackets,
925 resolving historical inconsistencies.
926 25. Removed autoloader warnings about absent MultipartBuffer::DESTROY.
927 26. Fixed non-sticky checkbox() when -name used without -value.
928 27. Hack to fix path_info() in IIS 2.0. Doesn't help with IIS 3.0.
929 28. Parameter syntax for debugging from command line now more
930 straightforward.
931 29. Added $DISABLE_UPLOAD to disable file uploads.
932 30. Added $POST_MAX to error out if POSTings exceed some ceiling.
933 31. Fixed url_param(), which wasn't working at all.
934 32. Fixed variable suicide problem in s///e expressions, where the
935 autoloader was needed during evaluation.
936 33. Removed excess spaces between elements of checkbox and radio
937 groups
938 34. Can now create "valueless" submit buttons
939 35. Can now set path_info as well as read it.
940 36. ReadParse() now returns a useful function result.
941 37. import_names() now allows you to optionally clear out the
942 namespace before importing (for mod_perl users)
943 38. Made it possible to have a popup menu or radio button with a value
944 of "0".
945 39. link() changed to Link() to avoid overriding native link function.
946 40. Takes advantage of mod_perl's register_cleanup() function to clear
947 globals.
948 41. <LAYER> and <ILAYER> added to :html3 functions.
949 42. Fixed problems with private tempfiles and NT/IIS systems.
950 43. No longer prints the DTD by default (I bet no one will complain).
951 44. Allow underscores to replace internal hyphens in parameter names.
952 45. CGI::Push supports heterogeneous MIME types and adjustable delays
953 between pages.
954 46. url_param() method added for retrieving URL parameters even when a
955 fill-out form is POSTed.
956 47. Got rid of warnings when radio_group() is called.
957 48. Cookies now moved to their very own module.
958 49. Fixed documentation bug in CGI::Fast.
959 50. Added a :no_debug pragma to the import list.
960
961 Version 2.36
962
963 1. Expanded JavaScript functionality
964 2. Preliminary support for cascading stylesheets
965 3. Security fixes for file uploads:
966 + Module will bail out if its temporary file already exists
967 + Temporary files can now be made completely private to avoid
968 peeking by other users or CGI scripts.
969 4. use CGI qw/:nph/ wasn't working correctly. Now it is.
970 5. Cookie and HTTP date formats didn't meet spec. Thanks to Mark
971 Fisher (fisherm@indy.tce.com) for catching and fixing this.
972
973 p
974
975 Version 2.35
976
977 1. Robustified multipart file upload against incorrect syntax in
978 POST.
979 2. Fixed more problems with mod_perl.
980 3. Added -noScript parameter to start_html().
981 4. Documentation fixes.
982
983 Version 2.34
984
985 1. Stupid typo fix
986
987 Version 2.33
988
989 1. Fixed a warning about an undefined environment variable.
990 2. Doug's patch for redirect() under mod_perl
991 3. Partial fix for busted inheritence from CGI::Apache
992 4. Documentation fixes.
993
994 Version 2.32
995
996 1. Improved support for Apache's mod_perl.
997 2. Changes to better support inheritance.
998 3. Support for OS/2.
999
1000 Version 2.31
1001
1002 1. New uploadInfo() method to obtain header information from uploaded
1003 files.
1004 2. cookie() without any arguments returns all the cookies passed to a
1005 script.
1006 3. Removed annoying warnings about $ENV{NPH} when running with the -w
1007 switch.
1008 4. Removed operator overloading throughout to make compatible with
1009 new versions of perl.
1010 5. -expires now implies the -date header, to avoid clock skew.
1011 6. WebSite passes cookies in $ENV{COOKIE} rather than
1012 $ENV{HTTP_COOKIE}. We now handle this, even though it's O'Reilly's
1013 fault.
1014 7. Tested successfully against new sfio I/O layer.
1015 8. Documentation fixes.
1016
1017 Version 2.30
1018
1019 1. Automatic detection of operating system at load time.
1020 2. Changed select() function to Select() in order to avoid conflict
1021 with Perl built-in.
1022 3. Added Tr() as an alternative to TR(); some people think it looks
1023 better that way.
1024 4. Fixed problem with autoloading of MultipartBuffer::DESTROY code.
1025 5. Added the following methods:
1026 + virtual_host()
1027 + server_software()
1028 6. Automatic NPH mode when running under Microsoft IIS server.
1029
1030 Version 2.29
1031
1032 1. Fixed cookie bugs
1033 2. Fixed problems that cropped up when useNamedParameters was set to
1034 1.
1035 3. Prevent CGI::Carp::fatalsToBrowser() from crapping out when
1036 encountering a die() within an eval().
1037 4. Fixed problems with filehandle initializers.
1038
1039 Version 2.28
1040
1041 1. Added support for NPH scripts; also fixes problems with Microsoft
1042 IIS.
1043 2. Fixed a problem with checkbox() values not being correctly saved
1044 and restored.
1045 3. Fixed a bug in which CGI objects created with empty string
1046 initializers took on default values from earlier CGI objects.
1047 4. Documentation fixes.
1048
1049 Version 2.27
1050
1051 1. Small but important bug fix: the automatic capitalization of tag
1052 attributes was accidentally capitalizing the VALUES as well as the
1053 ATTRIBUTE names (oops).
1054
1055 Version 2.26
1056
1057 1. Changed behavior of scrolling_list(), checkbox() and
1058 checkbox_group() methods so that defaults are honored correctly.
1059 The "fix" causes endform() to generate additional <INPUT
1060 TYPE="HIDDEN"> tags -- don't be surpised.
1061 2. Fixed bug involving the detection of the SSL protocol.
1062 3. Fixed documentation error in position of the -meta argument in
1063 start_html().
1064 4. HTML shortcuts now generate tags in ALL UPPERCASE.
1065 5. start_html() now generates correct SGML header:
1066 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
1067
1068 6. CGI::Carp no longer fails "use strict refs" pragma.
1069
1070 Version 2.25
1071
1072 1. Fixed bug that caused bad redirection on destination URLs with
1073 arguments.
1074 2. Fixed bug involving use_named_parameters() followed by
1075 start_multipart_form()
1076 3. Fixed bug that caused incorrect determination of binmode for
1077 Macintosh.
1078 4. Spelling fixes on documentation.
1079
1080 Version 2.24
1081
1082 1. Fixed bug that caused generation of lousy HTML for some form
1083 elements
1084 2. Fixed uploading bug in Windows NT
1085 3. Some code cleanup (not enough)
1086
1087 Version 2.23
1088
1089 1. Fixed an obscure bug that caused scripts to fail mysteriously.
1090 2. Fixed auto-caching bug.
1091 3. Fixed bug that prevented HTML shortcuts from passing taint checks.
1092 4. Fixed some -w warning problems.
1093
1094 Version 2.22
1095
1096 1. New CGI::Fast module for use with FastCGI protocol. See pod
1097 documentation for details.
1098 2. Fixed problems with inheritance and autoloading.
1099 3. Added TR() (<tr>) and PARAM() (<param>) methods to list of
1100 exported HTML tag-generating functions.
1101 4. Moved all CGI-related I/O to a bottleneck method so that this can
1102 be overridden more easily in mod_perl (thanks to Doug MacEachern).
1103 5. put() method as substitute for print() for use in mod_perl.
1104 6. Fixed crash in tmpFileName() method.
1105 7. Added tmpFileName(), startform() and endform() to export list.
1106 8. Fixed problems with attributes in HTML shortcuts.
1107 9. Functions that don't actually need access to the CGI object now no
1108 longer generate a default one. May speed things up slightly.
1109 10. Aesthetic improvements in generated HTML.
1110 11. New examples.
1111
1112 Version 2.21
1113
1114 1. Added the -meta argument to start_html().
1115 2. Fixed hidden fields (again).
1116 3. Radio_group() and checkbox_group() now return an appropriate
1117 scalar value when called in a scalar context, rather than
1118 returning a numeric value!
1119 4. Cleaned up the formatting of form elements to avoid unesthetic
1120 extra spaces within the attributes.
1121 5. HTML elements now correctly include the closing tag when
1122 parameters are present but null: em('')
1123 6. Added password_field() to the export list.
1124
1125 Version 2.20
1126
1127 1. Dumped the SelfLoader because of problems with running with taint
1128 checks and rolled my own. Performance is now significantly
1129 improved.
1130 2. Added HTML shortcuts.
1131 3. import() now adheres to the Perl module conventions, allowing
1132 CGI.pm to import any or all method names into the user's name
1133 space.
1134 4. Added the ability to initialize CGI objects from strings and
1135 associative arrays.
1136 5. Made it possible to initialize CGI objects with filehandle
1137 references rather than filehandle strings.
1138 6. Added the delete_all() and append() methods.
1139 7. CGI objects correctly initialize from filehandles on NT/95 systems
1140 now.
1141 8. Fixed the problem with binary file uploads on NT/95 systems.
1142 9. Fixed bug in redirect().
1143 10. Added '-Window-target' parameter to redirect().
1144 11. Fixed import_names() so that parameter names containing funny
1145 characters work.
1146 12. Broke the unfortunate connection between cookie and CGI parameter
1147 name space.
1148 13. Fixed problems with hidden fields whose values are 0.
1149 14. Cleaned up the documentation somewhat.
1150
1151 Version 2.19
1152
1153 1. Added cookie() support routines.
1154 2. Added -expires parameter to header().
1155 3. Added cgi-lib.pl compatability mode.
1156 4. Made the module more configurable for different operating systems.
1157 5. Fixed a dumb bug in JavaScript button() method.
1158
1159 Version 2.18
1160
1161 1. Fixed a bug that corrects a hang that occurs on some platforms
1162 when processing file uploads. Unfortunately this disables the
1163 check for bad Netscape uploads.
1164 2. Fixed bizarre problem involving the inability to process uploaded
1165 files that begin with a non alphabetic character in the file name.
1166 3. Fixed a bug in the hidden fields involving the -override directive
1167 being ignored when scalar defaults were passed.
1168 4. Added documentation on how to disable the SelfLoader features.
1169
1170 Version 2.17
1171
1172 1. Added support for the SelfLoader module.
1173 2. Added oodles of JavaScript support routines.
1174 3. Fixed bad bug in query_string() method that caused some parameters
1175 to be silently dropped.
1176 4. Robustified file upload code to handle premature termination by
1177 the client.
1178 5. Exported temporary file names on file upload.
1179 6. Removed spurious "uninitialized variable" warnings that appeared
1180 when running under 5.002.
1181 7. Added the Carp.pm library to the standard distribution.
1182 8. Fixed a number of errors in this documentation, and probably added
1183 a few more.
1184 9. Checkbox_group() and radio_group() now return the buttons as
1185 arrays, so that you can incorporate the individual buttons into
1186 specialized tables.
1187 10. Added the '-nolabels' option to checkbox_group() and
1188 radio_group(). Probably should be added to all the other
1189 HTML-generating routines.
1190 11. Added the url() method to recover the URL without the entire query
1191 string appended.
1192 12. Added request_method() to list of environment variables available.
1193 13. Would you believe it? Fixed hidden fields again!
1194
1195 Version 2.16
1196
1197 1. Fixed hidden fields yet again.
1198 2. Fixed subtle problems in the file upload method that caused
1199 intermittent failures (thanks to Keven Hendrick for this one).
1200 3. Made file upload more robust in the face of bizarre behavior by
1201 the Macintosh and Windows Netscape clients.
1202 4. Moved the POD documentation to the bottom of the module at the
1203 request of Stephen Dahmen.
1204 5. Added the -xbase parameter to the start_html() method, also at the
1205 request of Stephen Dahmen.
1206 6. Added JavaScript form buttons at Stephen's request. I'm not sure
1207 how to use this Netscape extension correctly, however, so for now
1208 the form() method is in the module as an undocumented feature. Use
1209 at your own risk!
1210
1211 Version 2.15
1212
1213 1. Added the -override parameter to all field-generating methods.
1214 2. Documented the user_name() and remote_user() methods.
1215 3. Fixed bugs that prevented empty strings from being recognized as
1216 valid textfield contents.
1217 4. Documented the use of framesets and added a frameset example.
1218
1219 Version 2.14
1220
1221 This was an internal experimental version that was never released.
1222
1223 Version 2.13
1224
1225 1. Fixed a bug that interfered with the value "0" being entered into
1226 text fields.
1227
1228 Version 2.01
1229
1230 1. Added -rows and -columns to the radio and checkbox groups. No
1231 doubt this will cause much grief because it seems to promise a
1232 level of meta-organization that it doesn't actually provide.
1233 2. Fixed a bug in the redirect() method -- it was not truly HTTP/1.0
1234 compliant.
1235
1236 Version 2.0
1237
1238 The changes seemed to touch every line of code, so I decided to bump
1239 up the major version number.
1240 1. Support for named parameter style method calls. This turns out
1241 to be a big win for extending CGI.pm when Netscape adds new HTML
1242 "features".
1243 2. Changed behavior of hidden fields back to the correct "sticky"
1244 behavior. This is going to break some programs, but it is for
1245 the best in the long run.
1246 3. Netscape 2.0b2 broke the file upload feature. CGI.pm now handles
1247 both 2.0b1 and 2.0b2-style uploading. It will probably break again
1248 in 2.0b3.
1249 4. There were still problems with library being unable to distinguish
1250 between a form being loaded for the first time, and a subsequent
1251 loading with all fields blank. We now forcibly create a default
1252 name for the Submit button (if not provided) so that there's
1253 always at least one parameter.
1254 5. More workarounds to prevent annoying spurious warning messages
1255 when run under the -w switch. -w is seriously broken in perl
1256 5.001!
1257
1258 Version 1.57
1259
1260 1. Support for the Netscape 2.0 "File upload" field.
1261 2. The handling of defaults for selected items in scrolling lists and
1262 multiple checkboxes is now consistent.
1263
1264 Version 1.56
1265
1266 1. Created true "pod" documentation for the module.
1267 2. Cleaned up the code to avoid many of the spurious "use of
1268 uninitialized variable" warnings when running with the -w switch.
1269 3. Added the autoEscape() method. v
1270 4. Added string interpolation of the CGI object.
1271 5. Added the ability to pass additional parameters to the <BODY> tag.
1272 6. Added the ability to specify the status code in the HTTP header.
1273
1274 Bug fixes in version 1.55
1275
1276 1. Every time self_url() was called, the parameter list would grow.
1277 This was a bad "feature".
1278 2. Documented the fact that you can pass "-" to radio_group() in
1279 order to prevent any button from being highlighted by default.
1280
1281 Bug fixes in version 1.54
1282
1283 1. The user_agent() method is now documented;
1284 2. A potential security hole in import() is now plugged.
1285 3. Changed name of import() to import_names() for compatability with
1286 CGI:: modules.
1287
1288 Bug fixes in version 1.53
1289
1290 1. Fixed several typos in the code that were causing the following
1291 subroutines to fail in some circumstances
1292 1. checkbox()
1293 2. hidden()
1294 2. No features added
1295
1296 New features added in version 1.52
1297
1298 1. Added backslashing, quotation marks, and other shell-style escape
1299 sequences to the parameters passed in during debugging off-line.
1300 2. Changed the way that the hidden() method works so that the default
1301 value always overrides the current one.
1302 3. Improved the handling of sticky values in forms. It's now less
1303 likely that sticky values will get stuck.
1304 4. If you call server_name(), script_name() and several other methods
1305 when running offline, the methods now create "dummy" values to
1306 work with.
1307
1308 Bugs fixed in version 1.51
1309
1310 1. param() when called without arguments was returning an array of
1311 length 1 even when there were no parameters to be had. Bad bug!
1312 Bad!
1313 2. The HTML code generated would break if input fields contained the
1314 forbidden characters ">< or &. You can now use these characters
1315 freely.
1316
1317 New features added in version 1.50
1318
1319 1. import() method allows all the parameters to be imported into a
1320 namespace in one fell swoop.
1321 2. Parameters are now returned in the same order in which they were
1322 defined.
1323
1324 Bugs fixed in version 1.45
1325
1326 1. delete() method didn't work correctly. This is now fixed.
1327 2. reset() method didn't allow you to set the name of the button.
1328 Fixed.
1329
1330 Bugs fixed in version 1.44
1331
1332 1. self_url() didn't include the path information. This is now fixed.
1333
1334 New features added in version 1.43
1335
1336 1. Added the delete() method.
1337
1338 New features added in version 1.42
1339
1340 1. The image_button() method to create clickable images.
1341 2. A few bug fixes involving forms embedded in <PRE> blocks.
1342
1343 New features added in version 1.4
1344
1345 1. New header shortcut methods
1346 + redirect() to create HTTP redirection messages.
1347 + start_html() to create the HTML title, complete with the
1348 recommended <LINK> tag that no one ever remembers to include.
1349 + end_html() for completeness' sake.
1350 2. A new save() method that allows you to write out the state of an
1351 script to a file or pipe.
1352 3. An improved version of the new() method that allows you to restore
1353 the state of a script from a file or pipe. With (2) this gives you
1354 dump and restore capabilities! (Wow, you can put a "121,931
1355 customers served" banner at the bottom of your pages!)
1356 4. A self_url() method that allows you to create state-maintaining
1357 hypertext links. In addition to allowing you to maintain the state
1358 of your scripts between invocations, this lets you work around a
1359 problem that some browsers have when jumping to internal links in
1360 a document that contains a form -- the form information gets lost.
1361 5. The user-visible labels in checkboxes, radio buttons, popup menus
1362 and scrolling lists have now been decoupled from the values sent
1363 to your CGI script. Your script can know a checkbox by the name of
1364 "cb1" while the user knows it by a more descriptive name. I've
1365 also added some parameters that were missing from the text fields,
1366 such as MAXLENGTH.
1367 6. A whole bunch of methods have been added to get at environment
1368 variables involved in user verification and other obscure
1369 features.
1370
1371 Bug fixes
1372
1373 1. The problems with the hidden fields have (I hope at last) been
1374 fixed.
1375 2. You can create multiple query objects and they will all be
1376 initialized correctly. This simplifies the creation of multiple
1377 forms on one page.
1378 3. The URL unescaping code works correctly now.