Security fix

[catagits/Catalyst-Action-REST.git] / Changes

diff --git a/Changes b/Changes
index d45db77..0be6d66 100644 (file)
--- a/Changes
+++ b/Changes
@@ -1,3 +1,35 @@
+ Remove Storable and FreezeThaw from the list
+ of serialization methods offered by default, and
+ from the docs - they're totally unsafe :/
+
+Tue 11 Dec 2012 22:04:00 GMT - Release 1.06
+ Sort list of allowed methods. RT#81825
+
+Mon  2 Jul 2012 20:13:00 BST - Release 1.05
+ Bugfix get_allowed_methods list:
+  * include HEAD
+  * remove "not_implemented"
+
+Sat  30 Jun 2012 10:25:00 BST - Release 1.04
+ Bugfix to _dispatch_rest_method
+
+Wed  28 Jun 2012 00:40:00 BST - Release 1.03
+ Expose _get_allowed_methods to the API (wreis)
+
+ Fix default OPTIONS handler: As the ->body is defined, then serialization
+ won't happen and we don't get wrong responses. (wreis)
+
+ Add default HEAD handler: auto dispatches to _GET method if it exists (wreis)
+
+Tue  5 Jun 2012 22:23:00 BST - Release 1.02
+ Fix forwarded REST methods, e.g. foo_GET to be more
+ correctly displayed as a forward in the stats info.
+
+ Make public response building methods for errors
+ _unsupported_media_type and _serialize_bad_request which
+ can be extended from an action-role to return custom
+ error response.
+
 Tue  29 May 2012 20:19:00 BST - Release 1.01
  Add Catalyst::Action::Deserialize::JSON::XS