1 Version 3.14 Tue Dec 6 17:12:03 EST 2005
2 1. Fixed broken scrolling_list() select attribute.
5 1. Removed extraneous empty "?" from end of self_url().
8 1. Fixed virtual_port so that it works properly with https protocol.
9 2. Fixed documentation for upload_hook().
10 3. Added POSTDATA documentation.
11 4. Made upload_hook() work in function-oriented mode.
12 5. Fixed POST_MAX behavior so that it doesn't cause client to hang.
13 6. Disabled automatic tab indexes and added new -tabindex pragma to
14 turn automatic indexes back on.
15 7. The url() and self_url() methods now work better in the context of Apache
16 mod_rewrite. Be advised that path_info() may give you confusing results
17 when mod_rewrite is active because Apache calculates the path info *after*
18 rewriting. This is mostly worked around in url() and self_url(), but you
19 may notice some anomalies.
20 8. Removed empty (and non-validating) <div> from code emitted by end_form().
21 9. Fixed CGI::Carp to work correctly with Mod_perl 1.29 in an Apache 2 environment.
22 10. Setting $CGI::TMPDIRECTORY should now be effective.
25 1. Killed warning in CGI::Cookie about MOD_PERL_API_VERSION
26 2. Fixed append() so that it works in function mode.
27 3. Workaround for a bug that appears in Apache2 versions through 2.0.54
28 in which SCRIPT_NAME and PATH_INFO are incorrect if the additional path_info
29 contains a double slash. This workaround will handle the common case of
30 http://mysite.com/cgi-bin/log.cgi/http://www.some.other.site/args, but will
31 not handle the uncommon case of a ScriptAlias directive that adds additional
32 path information to the end of the translated URI.
35 1. Added Apache2::RequestIO, which is necessary for mp2 interoperability.
38 1. Fixed tabindex="0" when using CGI to create forms without a prior start_html
39 2. Removed warning about non-numeric MOD_PERL_API_VERSION.
42 1. update support for mod_perl 2.0. versions prior to
43 mod_perl 1.999_22 (2.0.0-RC5) are no longer supported.
46 1. Fixed typo in mod_perl detection.
50 1. Fixed bare call to script() in start_html
51 2. Moved Fh::DESTROY out of autoloaded functions so as to avoid
52 clobbering $@ when CGI functions are executed in an eval{}
54 3. mod_perl 2.0 version detection patch in CGI::Cookie provided by
56 4. autoEscape() flag is now respected when generating extra
58 5. Tests for *tag start/end generation from Shlomi Fish.
59 6. Support for can() method provided by Ron Savage.
60 7. Fix for lang='' when outputting XHTML.
61 8. Added support for chunked transfer encoding, as suggested by
63 9. Fixed clobbering of row and column headers in tableized radio
64 and checkbox groups, as reported by Nicolas Thierry-Mieg.
65 10. <Label> tags are now associated with form elements, as suggested
66 by accessibility guidelines.
67 11. The <?xml> directive produced by start_html is now turned off by
68 default and the charset is specified in a <meta> directive. Apparently
69 IE6 (and maybe some versions of Opera) were getting confused by this.
70 12. Support for tab indexes.
71 13. Retired the HTML docs. The POD docs are now primary documentation.
72 14. CGI::Carp now correctly detects and handles Apache::Dispatch.
73 15. CGI::Util::utf8_chr now correctly sets the UTF8 flag on 5.006 or
74 higher perls (fix courtesy Slaven Rezic).
79 1. Fixed uninitialized variable warning on start_form() when running
81 2. Fixed CGI::_set_attributes so that attributes with a - are handled
83 3. Fixed CGI::Carp::die() so as to avoid problems from _longmess()
85 4. If HTTP_X_FORWARDED_HOST is defined (i.e. running under a proxy),
86 the various functions that return HOST will use that instead.
87 5. Fix for undefined utf8() call in CGI::Util.
88 6. Changed the call to warningsToBrowser() in
89 CGI::Carp::fatalsToBrowser to call only after HTTP header is sent
90 (thanks to Didier Lebrun for noticing).
91 7. Patches from Dan Harkless to make CGI.pm validatable against HTML
93 8. Fixed an extraneous "foo=bar" appearing when extra style
94 parameters passed to start_html;
95 9. Fixed cross-site scripting bug in startform() pointed out by Dan
97 10. Fixed documentation to discuss list context behavior of
98 form-element generators explicitly.
99 11. Fixed incorrect results from end_form() when called in OO manner.
100 12. Fixed query string stripping in order to handle URLs containing
102 13. During server push, set NPH to 0 rather than 1. This is supposed
103 to fix problems with Apache.
104 14. Fixed incorrect processing of multipart form fields that contain
105 embedded quotes. There's still the issue of how to handle ones
106 that contain embedded semicolons, but no one has complained (yet).
107 15. Fixed documentation bug in -style argument to start_html()
108 16. Added -status argument to redirect().
112 1. Fixed the problem with mod_perl crashing when "defaults" button
117 1. Fix upload hook functionality
118 2. Workaround for CGI->unescape_html()
119 3. Bumped version numbers in CGI::Fast and CGI::Util for 5.8.3-tobe
123 1. Bring in Apache::Response just in case.
124 2. File upload on EBCDIC systems now works.
128 1. No fix yet for upload failures when running on EBCDIC server.
129 2. Fixed uninitialized glob warnings that appeared when file
130 uploading under perl 5.8.2.
131 3. Added patch from Schlomi Fish to allow debugging of PATH_INFO from
133 4. Added patch from Steve Hay to correctly unlink tmp files under
135 5. Added upload_hook functionality from Jamie LeTaul
136 6. Workarounds for mod_perl 2 IO issues. Check that file upload and
137 state saving still working.
138 7. Added code for underreads.
139 8. Fixed misleading description of redirect() and relative URLs in
141 9. Workaround for weird interaction of CGI::Carp with Safe module
142 reported by William McKee.
143 10. Added patches from Ilmari Karonen to improve behavior of
145 11. Fixed documentation error in -style argument.
146 12. Added virtual_port() method for finding out what port server is
147 listening on in a virtual-host aware fashion.
151 1. Patch from Randal Schwartz to fix bug introduced by cross-site
152 scripting vulnerability "fix."
153 2. Patch from JFreeman to replace UTF-8 escape constant of 0xfe with
154 0xfc. Hope this is right!
158 1. Patch from Steve Hay to fix extra Content-type: appearing on
159 browser screen when FatalsToBrowser invoked.
160 2. Patch from Ewann Corvellec to fix cross-site scripting
162 3. Fixed tmpdir routine for file uploading to solve problem that
163 occurs under mod_perl when tmpdir is writable at startup time, but
168 1. Fixed crash in Dump() function.
172 1. Sigh. Uploaded wrong 2.96 to CPAN.
176 1. More bugfixes to the -style argument.
180 1. Fixed bugs in start_html(-style=>...) support introduced in 2.94.
184 1. Removed warning from reset() method.
187 and tags into the :html3 group. Hope this removes undefined CGI::Area
190 Changed CGI::Carp to play with mod_perl2 and to (hopefully) restore
191 reporting of compile-time errors.
193 Fixed potential deadlock between web server and CGI.pm when aborting
194 a read due to POST_MAX (reported by Antti Lankila).
196 Fixed issue with tag-generating function not incorporating content
197 when first variable undef.
199 Fixed cross-site scripting bug reported by obscure.
201 Fixed Dump() function to return correctly formed XHTML - bug
202 reported by Ralph Siemsen.
206 1. Fixed embarassing bug in mp1 support.
210 1. Fix to be P3P compliant submitted from MPREWITT.
211 2. Added CGI->r() API for mod_perl1/mod_perl2.
212 3. Fixed bug in redirect() that was corrupting cookies.
213 4. Minor fix to behavior of reset() button to make it consistent with
214 submit() button (first time this has been changed in 9 years).
215 5. Patch from Dan Kogai to handle UTF-8 correctly in 5.8 and higher.
216 6. Patch from Steve Hay to make CGI::Carp's error messages appear on
218 7. Added Yair Lenga's patch for non-urlencoded postings.
219 8. Added Stas Bekman's patches for mod_perl 2 compatibility.
220 9. Fixed uninitialized escape behavior submitted by William Campbell.
221 10. Fixed tied behavior so that you can pass arguments to tie()
222 11. Fixed incorrect generation of URLs when the path_info contains +
223 and other odd characters.
224 12. Fixed redirect(-cookies=>$cookie) problem.
225 13. Fixed tag generation bug that affects -javascript passed to
230 1. Attribute generation now correctly respects the value of
232 2. Fixed endofrm() syntax error introduced by Ben Edgington's patch.
236 1. Fixed bug in redirect header handling.
237 2. Added P3P option to header().
238 3. Patches from Alexey Mahotkin to make CGI::Carp work correctly with
239 object-oriented exceptions.
240 4. Removed inaccurate description of how to set multiple cookies from
241 CGI::Cookie pod file.
242 5. Patch from Kevin Mahony to prevent running out of filehandles when
243 uploading lots of files.
244 6. Documentation enhancement from Mark Fisher to note that the
245 import_names() method transforms the parameter names into valid
247 7. Patch from Dan Harkless to suppress lang attribute in <html> tag
248 if specified as a null string.
249 8. Patch from Ben Edgington to fix broken XHTML-transitional 1.0
250 validation on endform().
251 9. Custom html header fix from Steffen Beyer (first letter correctly
253 10. Added a -verbatim option to stylesheet generation from Michael
255 11. Faster delete() method from Neelam Gupta
256 12. Fixed broken Cygwin support.
257 13. Added empty charset support from Bradley Baetz
258 14. Patches from Doug Perham and Kevin Mahoney to fix file upload
259 failures when uploaded file is a multiple of 4096.
263 1. Fixed behavior of ACTION tag when POSTING to a URL that has a
265 2. Added Patch from Michael Rommel to handle multipart/mixed uploads
270 1. Fixed problem with uploads being refused under Perl 5.8 when under
272 2. Fixed uninitialized variable warnings under Perl 5.8.
273 3. Fixed CGI::Pretty regression test failures.
277 1. Security hole patched: when processing multipart/form-data
278 postings, most arguments were being untainted silently. Returned
279 arguments are now tainted correctly. This may cause some scripts
280 to fail that used to work (thanks to Nick Cleaton for pointing
281 this out and persisting until it was fixed).
282 2. Update for mod_perl 2.0.
283 3. Pragmas such as -no_xhtml are now respected in mod_perl
288 1. Fixes for broken CGI::Cookie expiration dates introduced in 2.84.
292 1. Fix for broken autoEscape function introduced in 2.84.
296 1. Fix for failed file uploads on Cygwin platforms.
297 2. HTML escaping code now replaced 0x8b and 0x9b with unicode
298 references < and *#8250;
302 1. Fixed autoEscape() documentation inconsistencies.
303 2. Patch from Ville Skyttä to fix a number of XHTML inconsistencies.
304 3. Added Max-Age to list of CGI::Cookie headers.
308 1. Patch from Rudolf Troller to add attribute setting and option
309 groups to form fields.
310 2. Patch from Simon Perreault for silent crashes when using CGI::Carp
312 3. Patch from Scott Gifford allows you to set the program name for
317 1. Removed extraneous slash from end of stylesheet tags generated by
318 start_html in non-XHTML mode.
319 2. Changed behavior of CGI::Carp with respect to eval{} contexts so
320 that output behaves properly in mod_perl environments.
321 3. Fixed default DTD so that it validates with W3C validator.
325 1. Fixed broken messages in CGI::Carp.
326 2. Changed checked="1" to checked="checked" for real XHTML
328 3. Resurrected REQUEST_URI code so that url() works correctly with
333 1. Changes to CGI::Carp to avoid "subroutine redefined" error
335 2. Default DTD is now XHTML 1.0 Transitional
336 3. Patches to support all HTML4 tags.
340 1. Added ability to change encoding in <?xml> assertion.
341 2. Fixed the old escapeHTML('CGI') ne "CGI" bug
342 3. In accordance with XHTML requirements, there are no longer any
343 minimized attributes, such as "checked".
344 4. Patched bug which caused file uploads of exactly 4096 bytes to be
345 truncated to 4094 (thanks to Kevin Mahony)
346 5. New tests and fixes to CGI::Pretty (thanks to Michael Schwern).
350 1. No new features, but released in order to fix an apparent CPAN
355 1. New esc.t regression test for EBCDIC translations courtesy Peter
357 2. Patches from James Jurach to make compatible with FCGI-ProcManager
358 3. Additional fields passed to header() (like -Content_disposition)
359 now honor initial capitalization.
360 4. Patch from Andrew McNaughton to handle utf-8 escapes (%uXXXX
365 1. Syntax error in the autoloaded Fh::new() subroutine.
366 2. Better error reporting in autoloaded functions.
370 1. Tiny tweak to filename regular expression function on line 3355.
374 1. Fixed bug in server push boundary strings (CGI.pm and CGI::Push).
375 2. Fixed bug that occurs when uploading files with funny characters
377 3. Fixed non-XHTML-compliant attributes produced by textfield()
378 4. Added EPOC support, courtesy Olaf Flebbe
379 5. Fixed minor XHTML bugs.
380 6. Made escape() and unescape() symmetric with respect to EBCDIC,
381 courtesy Roca, Ignasi <ignasi.roca@fujitsu.siemens.es>
382 7. Removed uninitialized variable warning from CGI::Cookie, provided
383 by Atipat Rojnuckarin <rojnuca@yahoo.com>
384 8. Fixed bug in CGI::Pretty that causes it to print partial end tags
385 when the $INDENT global is changed.
386 9. Single quotes are changed to character entity ' for compatibility
392 1. Quashed one-character bug that caused CGI.pm to fail on file
398 1. Added -base to the list of arguments accepted by url().
399 2. Fixes to XHTML support.
400 3. POST parameters no longer show up in the Location box.
405 1. Fixed the defaults button so that it works again
406 2. Charset is now correctly saved and restored when saving to files
407 3. url() now works correctly when given scripts with %20 and other
408 escapes in the additional path info. This undoes a patch
409 introduced in version 2.47 that I no longer understand the
415 1. Newlines in the value attributes of hidden fields and other form
416 elements are now escaped when using ISO-Latin.
417 2. Inline script and style sections are now protected as CDATA
418 sections when XHTML mode is on (the default).
423 1. Fixed bug in scrolling_list() which omitted a space in front of
424 the "multiple" attribute.
425 2. Squashed the "useless use of string in void context" message from
430 1. startform() now creates default ACTION for POSTs as well as GETs.
431 This may break some browsers, but it no longer violates the HTML
433 2. CGI.pm now emits XHTML by default. Disable with -no_xhtml.
434 3. We no longer interpret &#ddd sequences in non-latin character
439 1. No longer attempts to escape characters when dealing with non
440 ISO-8861 character sets.
441 2. checkbox() function now defaults to using -value as its label,
442 rather than -name. The current behavior is what has been
443 documented from the beginning.
444 3. -style accepts array reference to incorporate multiple stylesheets
447 1. Fixed two bugs that caused the -compile pragma to fail with a
452 1. Added XHTML support (incomplete; tags need to be lowercased).
453 2. Fixed CGI/Carp when running under mod_perl. Probably broke in
455 3. Fixed problems when passing multiple cookies.
456 4. Suppress warnings from _tableize() that were appearing when using
457 -w switch with radio_group() and checkbox_group().
458 5. Support for the header() -attachment argument, which can give
459 pages a default file name when saving to disk.
463 1. 2.65 changes in make_attributes() broke HTTP header functions
464 (including redirect), so made it context sensitive.
468 1. Fixed regression tests to skip tests that require implicit fork on
469 machines without fork().
470 2. Changed make_attributes() to automatically escape any HTML
472 3. Minor documentation fix in javascript example.
476 1. Changes introduced in 2.63 broke param() when retrieving parameter
477 lists containing only a single argument. This is now fixed.
478 2. self_url() now defaults to returning parameters delimited with
479 semicolon. Use the pragma -oldstyle_urls to get the old "&"
484 1. Fixed CGI::Push to pull out parameters correctly.
485 2. Fixed redirect() so that it works with default character set
486 3. Changed param() so as to returned empty string '' when referring
487 to variables passed in query strings like 'name1=&name2'
491 1. Fixed broken ReadParse() function, and added regression tests
492 2. Fixed broken CGI::Pretty, and added regression tests
496 1. Moved more functions from CGI.pm proper into CGI/Util.pm.
497 CGI/Cookie should now be standalone.
498 2. Disabled per-user temporary directories, which were causing grief.
502 1. Fixed junk appearing in autogenerated HTML functions when using
503 object-oriented mode.
507 1. autoescape functionality breaks too much existing code, removed
509 2. use escapeHTML() manually
513 This is the release version of 2.57.
517 1. Added -debug pragma and turned off auto reading of STDIN.
518 2. Default DTD updated to HTML 4.01 transitional.
519 3. Added charset() method and the -charset argument to header().
520 4. Fixed behavior of escapeHTML() to respect charset() and to escape
521 nasty Windows characters (thanks to Tom Christiansen).
522 5. Handle REDIRECT_QUERY_STRING correctly.
523 6. Removed use_named_parameters() because of dependency problems and
525 7. Fixed problems with bad HREF links generated by url(-relative=>1)
526 when the url is like /people/.
527 8. Silenced a warning on upload (patch provided by Jonas Liljegren)
528 9. Fixed race condition in CGI::Carp when errors occur during parsing
529 (patch provided by Maurice Aubrey).
530 10. Fixed failure of url(-path_info=>1) when path contains % signs.
531 11. Fixed warning from CGI::Cookie when receiving foreign cookies that
532 don't use name=value format.
533 12. Fixed incompatibilities with file uploading on VMS systems.
537 1. Fixed bugs in file upload introduced in version 2.55
538 2. Fixed long-standing bug that prevented two files with identical
539 names from being uploaded.
543 1. Fixed cookie regression test so as not to produce an error.
544 2. Fixed path_info() and self_url() to work correctly together when
545 path_info() modified.
546 3. Removed manify warnings from CGI::{Switch,Apache}.
550 1. This will be the last release of the monolithic CGI.pm module.
551 Later versions will be modularized and optimized.
552 2. DOMAIN tag no longer added to cookies by default. This will break
553 some versions of Internet Explorer, but will avoid breaking
554 networks which use host tables without fully qualified domain
555 names. For compatibility, please always add the -domain tag when
557 3. Fixed escape() method so that +'s are treated correctly.
558 4. Updated CGI::Pretty module.
562 1. Forgot to upgrade regression tests before releasing 2.52. NOTHING
563 ELSE HAS CHANGED IN LIBRARY
567 1. Spurious newline in checkbox() routine removed. (courtesy John
569 2. TEXTAREA linebreaks now respected in dump() routine. (courtesy
571 3. Patches for DOS ports (courtesy Robert Davies)
573 5. More fixes for cookie problems
574 6. Fix CGI::Carp so that it doesn't affect eval{} blocks (courtesy
579 1. Fixed problems with cookies not being remembered when sent to IE
580 5.0 (and Netscape 5.0 too?)
581 2. Numerous HTML compliance problems in cgi_docs.html; fixed thanks
586 1. Added a new Vars() method to retrieve all parameters as a tied
588 2. Untainted tainted tempfile name so that script doesn't fail on
590 3. Made picking of upload tempfile name more intelligent so that
591 doesn't fail in case of name collision.
592 4. Fixed handling of expire times when passed an absolute timestamp.
593 5. Changed dump() to Dump() to avoid name clashes.
597 1. Fixes for FastCGI (globals not getting reset)
598 2. Fixed url() to correctly handle query string and path under
603 1. Reverted detection of MOD_PERL to avoid breaking PerlEX.
607 1. Patch to fix file upload bug appearing in IE 3.01 for
609 2. Replaced use of $ENV{SCRIPT_NAME} with $ENV{REQUEST_URI} when
610 running under Apache, to fix self-referencing URIs.
611 3. Fixed bug in escapeHTML() which caused certain constructs, such as
612 CGI->image_button(), to fail.
613 4. Fixed bug which caused strong('CGI') to fail. Be careful to use
614 CGI::strong('CGI') and not CGI->strong('CGI'). The latter will
615 produce confusing results.
616 5. Added upload() function, as a preferred replacement for the
617 "filehandle as string" feature.
618 6. Added cgi_error() function.
619 7. Rewrote file upload handling to return undef rather than dieing
620 when an error is encountered. Be sure to call cgi_error() to find
625 1. Fix for failure of the "include" tests under mod_perl
626 2. Added end_multipart_form to prevent failures during qw(-compile
631 1. Multiple small documentation fixes
632 2. CGI::Pretty didn't get into 2.44. Fixed now.
636 1. Fixed file descriptor leak in upload function.
637 2. Fixed bug in header() that prevented fields from containing double
639 3. Added Brian Paulsen's CGI::Pretty package for pretty-printing
641 4. Removed CGI::Apache and CGI::Switch from the distribution.
642 5. Generated start_* shortcuts so that start_table(), end_table(),
643 start_ol(), end_ol(), and so forth now work (see the docs on how
644 to enable this feature).
645 6. Changed accept() to Accept(), sub() to Sub(). There's still a
646 conflict with reset(), but this will break too many existing
651 1. Fixed problem with "use strict" and file uploads (thanks to Peter
653 2. Fixed problem with not MSIE 3.01 for the power_mac not doing file
655 3. Fixed problem with file upload on IIS 4.0 when authorization in
657 4. -content_type and '-content-type' can now be provided to header()
658 as synonyms for -type.
659 5. CGI::Carp now escapes the ampersand BEFORE escaping the > and <
661 6. Fixed "not an array reference" error when passing a hash reference
663 7. Fixed non-removal of uploaded TMP files on NT platforms which
664 occurs when server runs on non-C drive (thanks to Steve Kilbane
665 for finding this one).
669 1. Too many screams of anguish at changed behavior of url(). Is now
670 back to its old behavior by default, with options to generate all
672 2. Added regression tests. "make test" now works.
673 3. Documentation fixes.
674 4. Fixes for Macintosh uploads, but uploads STILL do not work pending
679 1. url() method now includes the path info. Use script_name() to get
680 it without path info().
681 2. Changed handling of empty attributes in HTML tag generation. Be
682 warned! Use table({-border=>undef}) rather than
683 table({-border=>''}).
684 3. Changes to allow uploaded filenames to be compared to other
685 strings with "eq", "cmp" and "ne".
686 4. Changes to allow CGI.pm to coexist more peacefully with
688 5. Changes to prevent exported variables from clashing when importing
689 ":all" set in combination with cookies.
693 1. CGI::Carp patched to work better with mod_perl (thanks to Chris
695 2. Uploads of files whose names begin with numbers or the Windows
696 \\UNC\shared\file nomenclature should no longer fail.
697 3. The <STYLE> tag (for cascading style sheets) now generates the
698 required TYPE attribute.
699 4. Server push primitives added, thanks to Ed Jordan.
700 5. Table and other HTML3 functions are now part of the :standard set.
701 6. Small documentation fixes.
704 1. Do something about the DTD mess. The module should generate
705 correct DTDs, or at least offer the programmer a way to specify
707 2. Split CGI.pm into CGI processing and HTML-generating modules.
708 3. More robust file upload (?still not working on the Macintosh?).
709 4. Bring in all the HTML4 functionality, particular the accessibility
714 1. file uploads failing because of VMS patch; fixed.
715 2. -dtd parameter was not being properly processed.
719 I finally got tired of all the 2.37 betas and released 2.38. The main
720 difference between this version and the last 2.37 beta (2.37b30) are
721 some fixes for VMS. This should allow file upload to work properly on
724 Version 2.37, various beta versions
726 1. Added a CGI::Cookie::parse() method for lucky mod_perl users.
727 2. No longer need separate -values and -labels arguments for
728 multi-valued form elements.
729 3. Added better interface to raw cookies (fix courtesy Ken Fox,
731 4. Added param_fetch() function for direct access to parameter list.
732 5. Fix to checkbox() to allow for multi-valued single checkboxes
734 6. Added a compile() method for those who want to compile without
736 7. Documented the import pragmas a little better.
737 8. Added a -compile switch to the use clause for the long-suffering
738 mod_perl and Perl compiler users.
739 9. Fixed initialization routines so that FileHandle and type globs
740 work correctly (and hash initialization doesn't fail!).
741 10. Better deletion of temporary files on NT systems.
742 11. Added documentation on escape(), unescape(), unescapeHTML() and
743 unescapeHTML() subroutines.
744 12. Added documentation on creating subclasses.
745 13. Fixed problem when calling $self->SUPER::foo() from inheriting
747 14. Fixed problem using filehandles from within subroutines.
748 15. Fixed inability to use the string "CGI" as a parameter.
749 16. Fixed exponentially growing $FILLUNIT bug
750 17. Check for undef filehandle in read_from_client()
751 18. Now requires the UNIVERSAL.pm module, present in Perl 5.003_7 or
753 19. Fixed problem with uppercase-only parameters being ignored.
754 20. Fixed vanishing cookie problem.
755 21. Fixed warning in initialize_globals() under mod_perl.
756 22. File uploads from Macintosh versions of MSIE should now work.
757 23. Pragmas now preceded by dashes (-nph) rather than colons (:nph).
758 Old style is supported for backward compatability.
759 24. Can now pass arguments to all functions using {} brackets,
760 resolving historical inconsistencies.
761 25. Removed autoloader warnings about absent MultipartBuffer::DESTROY.
762 26. Fixed non-sticky checkbox() when -name used without -value.
763 27. Hack to fix path_info() in IIS 2.0. Doesn't help with IIS 3.0.
764 28. Parameter syntax for debugging from command line now more
766 29. Added $DISABLE_UPLOAD to disable file uploads.
767 30. Added $POST_MAX to error out if POSTings exceed some ceiling.
768 31. Fixed url_param(), which wasn't working at all.
769 32. Fixed variable suicide problem in s///e expressions, where the
770 autoloader was needed during evaluation.
771 33. Removed excess spaces between elements of checkbox and radio
773 34. Can now create "valueless" submit buttons
774 35. Can now set path_info as well as read it.
775 36. ReadParse() now returns a useful function result.
776 37. import_names() now allows you to optionally clear out the
777 namespace before importing (for mod_perl users)
778 38. Made it possible to have a popup menu or radio button with a value
780 39. link() changed to Link() to avoid overriding native link function.
781 40. Takes advantage of mod_perl's register_cleanup() function to clear
783 41. <LAYER> and <ILAYER> added to :html3 functions.
784 42. Fixed problems with private tempfiles and NT/IIS systems.
785 43. No longer prints the DTD by default (I bet no one will complain).
786 44. Allow underscores to replace internal hyphens in parameter names.
787 45. CGI::Push supports heterogeneous MIME types and adjustable delays
789 46. url_param() method added for retrieving URL parameters even when a
790 fill-out form is POSTed.
791 47. Got rid of warnings when radio_group() is called.
792 48. Cookies now moved to their very own module.
793 49. Fixed documentation bug in CGI::Fast.
794 50. Added a :no_debug pragma to the import list.
798 1. Expanded JavaScript functionality
799 2. Preliminary support for cascading stylesheets
800 3. Security fixes for file uploads:
801 + Module will bail out if its temporary file already exists
802 + Temporary files can now be made completely private to avoid
803 peeking by other users or CGI scripts.
804 4. use CGI qw/:nph/ wasn't working correctly. Now it is.
805 5. Cookie and HTTP date formats didn't meet spec. Thanks to Mark
806 Fisher (fisherm@indy.tce.com) for catching and fixing this.
812 1. Robustified multipart file upload against incorrect syntax in
814 2. Fixed more problems with mod_perl.
815 3. Added -noScript parameter to start_html().
816 4. Documentation fixes.
824 1. Fixed a warning about an undefined environment variable.
825 2. Doug's patch for redirect() under mod_perl
826 3. Partial fix for busted inheritence from CGI::Apache
827 4. Documentation fixes.
831 1. Improved support for Apache's mod_perl.
832 2. Changes to better support inheritance.
837 1. New uploadInfo() method to obtain header information from uploaded
839 2. cookie() without any arguments returns all the cookies passed to a
841 3. Removed annoying warnings about $ENV{NPH} when running with the -w
843 4. Removed operator overloading throughout to make compatible with
844 new versions of perl.
845 5. -expires now implies the -date header, to avoid clock skew.
846 6. WebSite passes cookies in $ENV{COOKIE} rather than
847 $ENV{HTTP_COOKIE}. We now handle this, even though it's O'Reilly's
849 7. Tested successfully against new sfio I/O layer.
850 8. Documentation fixes.
854 1. Automatic detection of operating system at load time.
855 2. Changed select() function to Select() in order to avoid conflict
857 3. Added Tr() as an alternative to TR(); some people think it looks
859 4. Fixed problem with autoloading of MultipartBuffer::DESTROY code.
860 5. Added the following methods:
863 6. Automatic NPH mode when running under Microsoft IIS server.
868 2. Fixed problems that cropped up when useNamedParameters was set to
870 3. Prevent CGI::Carp::fatalsToBrowser() from crapping out when
871 encountering a die() within an eval().
872 4. Fixed problems with filehandle initializers.
876 1. Added support for NPH scripts; also fixes problems with Microsoft
878 2. Fixed a problem with checkbox() values not being correctly saved
880 3. Fixed a bug in which CGI objects created with empty string
881 initializers took on default values from earlier CGI objects.
882 4. Documentation fixes.
886 1. Small but important bug fix: the automatic capitalization of tag
887 attributes was accidentally capitalizing the VALUES as well as the
888 ATTRIBUTE names (oops).
892 1. Changed behavior of scrolling_list(), checkbox() and
893 checkbox_group() methods so that defaults are honored correctly.
894 The "fix" causes endform() to generate additional <INPUT
895 TYPE="HIDDEN"> tags -- don't be surpised.
896 2. Fixed bug involving the detection of the SSL protocol.
897 3. Fixed documentation error in position of the -meta argument in
899 4. HTML shortcuts now generate tags in ALL UPPERCASE.
900 5. start_html() now generates correct SGML header:
901 <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML//EN">
903 6. CGI::Carp no longer fails "use strict refs" pragma.
907 1. Fixed bug that caused bad redirection on destination URLs with
909 2. Fixed bug involving use_named_parameters() followed by
910 start_multipart_form()
911 3. Fixed bug that caused incorrect determination of binmode for
913 4. Spelling fixes on documentation.
917 1. Fixed bug that caused generation of lousy HTML for some form
919 2. Fixed uploading bug in Windows NT
920 3. Some code cleanup (not enough)
924 1. Fixed an obscure bug that caused scripts to fail mysteriously.
925 2. Fixed auto-caching bug.
926 3. Fixed bug that prevented HTML shortcuts from passing taint checks.
927 4. Fixed some -w warning problems.
931 1. New CGI::Fast module for use with FastCGI protocol. See pod
932 documentation for details.
933 2. Fixed problems with inheritance and autoloading.
934 3. Added TR() (<tr>) and PARAM() (<param>) methods to list of
935 exported HTML tag-generating functions.
936 4. Moved all CGI-related I/O to a bottleneck method so that this can
937 be overridden more easily in mod_perl (thanks to Doug MacEachern).
938 5. put() method as substitute for print() for use in mod_perl.
939 6. Fixed crash in tmpFileName() method.
940 7. Added tmpFileName(), startform() and endform() to export list.
941 8. Fixed problems with attributes in HTML shortcuts.
942 9. Functions that don't actually need access to the CGI object now no
943 longer generate a default one. May speed things up slightly.
944 10. Aesthetic improvements in generated HTML.
949 1. Added the -meta argument to start_html().
950 2. Fixed hidden fields (again).
951 3. Radio_group() and checkbox_group() now return an appropriate
952 scalar value when called in a scalar context, rather than
953 returning a numeric value!
954 4. Cleaned up the formatting of form elements to avoid unesthetic
955 extra spaces within the attributes.
956 5. HTML elements now correctly include the closing tag when
957 parameters are present but null: em('')
958 6. Added password_field() to the export list.
962 1. Dumped the SelfLoader because of problems with running with taint
963 checks and rolled my own. Performance is now significantly
965 2. Added HTML shortcuts.
966 3. import() now adheres to the Perl module conventions, allowing
967 CGI.pm to import any or all method names into the user's name
969 4. Added the ability to initialize CGI objects from strings and
971 5. Made it possible to initialize CGI objects with filehandle
972 references rather than filehandle strings.
973 6. Added the delete_all() and append() methods.
974 7. CGI objects correctly initialize from filehandles on NT/95 systems
976 8. Fixed the problem with binary file uploads on NT/95 systems.
977 9. Fixed bug in redirect().
978 10. Added '-Window-target' parameter to redirect().
979 11. Fixed import_names() so that parameter names containing funny
981 12. Broke the unfortunate connection between cookie and CGI parameter
983 13. Fixed problems with hidden fields whose values are 0.
984 14. Cleaned up the documentation somewhat.
988 1. Added cookie() support routines.
989 2. Added -expires parameter to header().
990 3. Added cgi-lib.pl compatability mode.
991 4. Made the module more configurable for different operating systems.
992 5. Fixed a dumb bug in JavaScript button() method.
996 1. Fixed a bug that corrects a hang that occurs on some platforms
997 when processing file uploads. Unfortunately this disables the
998 check for bad Netscape uploads.
999 2. Fixed bizarre problem involving the inability to process uploaded
1000 files that begin with a non alphabetic character in the file name.
1001 3. Fixed a bug in the hidden fields involving the -override directive
1002 being ignored when scalar defaults were passed.
1003 4. Added documentation on how to disable the SelfLoader features.
1007 1. Added support for the SelfLoader module.
1008 2. Added oodles of JavaScript support routines.
1009 3. Fixed bad bug in query_string() method that caused some parameters
1010 to be silently dropped.
1011 4. Robustified file upload code to handle premature termination by
1013 5. Exported temporary file names on file upload.
1014 6. Removed spurious "uninitialized variable" warnings that appeared
1015 when running under 5.002.
1016 7. Added the Carp.pm library to the standard distribution.
1017 8. Fixed a number of errors in this documentation, and probably added
1019 9. Checkbox_group() and radio_group() now return the buttons as
1020 arrays, so that you can incorporate the individual buttons into
1022 10. Added the '-nolabels' option to checkbox_group() and
1023 radio_group(). Probably should be added to all the other
1024 HTML-generating routines.
1025 11. Added the url() method to recover the URL without the entire query
1027 12. Added request_method() to list of environment variables available.
1028 13. Would you believe it? Fixed hidden fields again!
1032 1. Fixed hidden fields yet again.
1033 2. Fixed subtle problems in the file upload method that caused
1034 intermittent failures (thanks to Keven Hendrick for this one).
1035 3. Made file upload more robust in the face of bizarre behavior by
1036 the Macintosh and Windows Netscape clients.
1037 4. Moved the POD documentation to the bottom of the module at the
1038 request of Stephen Dahmen.
1039 5. Added the -xbase parameter to the start_html() method, also at the
1040 request of Stephen Dahmen.
1041 6. Added JavaScript form buttons at Stephen's request. I'm not sure
1042 how to use this Netscape extension correctly, however, so for now
1043 the form() method is in the module as an undocumented feature. Use
1048 1. Added the -override parameter to all field-generating methods.
1049 2. Documented the user_name() and remote_user() methods.
1050 3. Fixed bugs that prevented empty strings from being recognized as
1051 valid textfield contents.
1052 4. Documented the use of framesets and added a frameset example.
1056 This was an internal experimental version that was never released.
1060 1. Fixed a bug that interfered with the value "0" being entered into
1065 1. Added -rows and -columns to the radio and checkbox groups. No
1066 doubt this will cause much grief because it seems to promise a
1067 level of meta-organization that it doesn't actually provide.
1068 2. Fixed a bug in the redirect() method -- it was not truly HTTP/1.0
1073 The changes seemed to touch every line of code, so I decided to bump
1074 up the major version number.
1075 1. Support for named parameter style method calls. This turns out
1076 to be a big win for extending CGI.pm when Netscape adds new HTML
1078 2. Changed behavior of hidden fields back to the correct "sticky"
1079 behavior. This is going to break some programs, but it is for
1080 the best in the long run.
1081 3. Netscape 2.0b2 broke the file upload feature. CGI.pm now handles
1082 both 2.0b1 and 2.0b2-style uploading. It will probably break again
1084 4. There were still problems with library being unable to distinguish
1085 between a form being loaded for the first time, and a subsequent
1086 loading with all fields blank. We now forcibly create a default
1087 name for the Submit button (if not provided) so that there's
1088 always at least one parameter.
1089 5. More workarounds to prevent annoying spurious warning messages
1090 when run under the -w switch. -w is seriously broken in perl
1095 1. Support for the Netscape 2.0 "File upload" field.
1096 2. The handling of defaults for selected items in scrolling lists and
1097 multiple checkboxes is now consistent.
1101 1. Created true "pod" documentation for the module.
1102 2. Cleaned up the code to avoid many of the spurious "use of
1103 uninitialized variable" warnings when running with the -w switch.
1104 3. Added the autoEscape() method. v
1105 4. Added string interpolation of the CGI object.
1106 5. Added the ability to pass additional parameters to the <BODY> tag.
1107 6. Added the ability to specify the status code in the HTTP header.
1109 Bug fixes in version 1.55
1111 1. Every time self_url() was called, the parameter list would grow.
1112 This was a bad "feature".
1113 2. Documented the fact that you can pass "-" to radio_group() in
1114 order to prevent any button from being highlighted by default.
1116 Bug fixes in version 1.54
1118 1. The user_agent() method is now documented;
1119 2. A potential security hole in import() is now plugged.
1120 3. Changed name of import() to import_names() for compatability with
1123 Bug fixes in version 1.53
1125 1. Fixed several typos in the code that were causing the following
1126 subroutines to fail in some circumstances
1129 2. No features added
1131 New features added in version 1.52
1133 1. Added backslashing, quotation marks, and other shell-style escape
1134 sequences to the parameters passed in during debugging off-line.
1135 2. Changed the way that the hidden() method works so that the default
1136 value always overrides the current one.
1137 3. Improved the handling of sticky values in forms. It's now less
1138 likely that sticky values will get stuck.
1139 4. If you call server_name(), script_name() and several other methods
1140 when running offline, the methods now create "dummy" values to
1143 Bugs fixed in version 1.51
1145 1. param() when called without arguments was returning an array of
1146 length 1 even when there were no parameters to be had. Bad bug!
1148 2. The HTML code generated would break if input fields contained the
1149 forbidden characters ">< or &. You can now use these characters
1152 New features added in version 1.50
1154 1. import() method allows all the parameters to be imported into a
1155 namespace in one fell swoop.
1156 2. Parameters are now returned in the same order in which they were
1159 Bugs fixed in version 1.45
1161 1. delete() method didn't work correctly. This is now fixed.
1162 2. reset() method didn't allow you to set the name of the button.
1165 Bugs fixed in version 1.44
1167 1. self_url() didn't include the path information. This is now fixed.
1169 New features added in version 1.43
1171 1. Added the delete() method.
1173 New features added in version 1.42
1175 1. The image_button() method to create clickable images.
1176 2. A few bug fixes involving forms embedded in <PRE> blocks.
1178 New features added in version 1.4
1180 1. New header shortcut methods
1181 + redirect() to create HTTP redirection messages.
1182 + start_html() to create the HTML title, complete with the
1183 recommended <LINK> tag that no one ever remembers to include.
1184 + end_html() for completeness' sake.
1185 2. A new save() method that allows you to write out the state of an
1186 script to a file or pipe.
1187 3. An improved version of the new() method that allows you to restore
1188 the state of a script from a file or pipe. With (2) this gives you
1189 dump and restore capabilities! (Wow, you can put a "121,931
1190 customers served" banner at the bottom of your pages!)
1191 4. A self_url() method that allows you to create state-maintaining
1192 hypertext links. In addition to allowing you to maintain the state
1193 of your scripts between invocations, this lets you work around a
1194 problem that some browsers have when jumping to internal links in
1195 a document that contains a form -- the form information gets lost.
1196 5. The user-visible labels in checkboxes, radio buttons, popup menus
1197 and scrolling lists have now been decoupled from the values sent
1198 to your CGI script. Your script can know a checkbox by the name of
1199 "cb1" while the user knows it by a more descriptive name. I've
1200 also added some parameters that were missing from the text fields,
1202 6. A whole bunch of methods have been added to get at environment
1203 variables involved in user verification and other obscure
1208 1. The problems with the hidden fields have (I hope at last) been
1210 2. You can create multiple query objects and they will all be
1211 initialized correctly. This simplifies the creation of multiple
1213 3. The URL unescaping code works correctly now.