Static::Simple, added path security fix

[catagits/Catalyst-Plugin-Static-Simple.git] / Changes

diff --git a/Changes b/Changes
index 7f02ca7..9fc2c71 100644 (file)
--- a/Changes
+++ b/Changes
@@ -1,5 +1,18 @@
 Revision history for Perl extension Catalyst::Plugin::Static::Simple
 
+0.12
+        - Made prepare_action play nice with other plugins by not short-
+          circuiting.
+        - Added tmpl to the ignored extensions.
+        - Fixed security problem if req->path contained '..'.
+
+0.11    2005-11-13 16:25:00
+        - Removed the code that set the 304 Not Modified header.  This caused
+          problems with IE under Apache.
+        - Changed 5.50 writing method to pass an IO::File object directly to
+          $c->res->body.
+        - This version is included with Catalyst 5.50.
+
 0.10    2005-10-19 17:20:00
         - Added tt2 to the list of ignored extensions.
         - For Catalyst 5.5+, replaced File::Slurp with a buffered read/write