Permalink
Commits on Jan 13, 2016
  1. @davidpersson

    Fixing/Improving `String::compare()` algorithm; Security; backported.

    The comparison algorithm used before wasn't really resistent against
    timing attacks. While a whole iteration was always performed, the
    loop's body would perform differently. Once `$result` was `false`,
    the right side of the condition was evaluated anymore, thus leading
    to an (albeit minimal) shorter execution time.
    
    The affected code is:
    ```
    $result = $result && ($left[$i] === $right[$i]);
    ```
    
    Refs #1259.
    davidpersson committed Sep 13, 2014
Commits on Oct 11, 2012
  1. @nateabele

    Refactoring asset handling in `Media`, implementing support for addin…

    …g asset hosts through `Libraries`.
    nateabele committed Oct 11, 2012
Commits on Oct 1, 2012
  1. @nateabele
  2. @nateabele
Commits on Sep 28, 2012
  1. @gwoo

    Merge pull request #662 from UnionOfRAD/request-response

    WARNING: BC break. Request and Response refactor usage of type()
    gwoo committed Sep 28, 2012
  2. @gwoo

    Adding test for encoded messages in \action\Response.

    Reorganizing some tests to make it clearer what is tested.
    gwoo committed Sep 27, 2012
  3. @gwoo
  4. @gwoo
  5. @gwoo

    WARNING: BC break. Use `type` method. to properly set Content-Type on…

    … all Request/Responses.
    
    Message bodies automatically encoded/decoded for convenience.
    gwoo committed Sep 27, 2012
  6. @nateabele @gwoo

    First pass at disambiguating request/response content type. WARNING: …

    …BC break - going forward, usage of the `$type` instance property should be replaced with the `type()` method.
    nateabele committed with gwoo Sep 18, 2012
Commits on Sep 26, 2012
  1. @nateabele

    Merge pull request #659 from rapzo/dev

    Fixed typo
    nateabele committed Sep 26, 2012
  2. @rapzo
  3. @fellars @nateabele
Commits on Sep 24, 2012
  1. @nateabele

    Merge pull request #656 from d1rk/redis-method-dispatch

    allow dispatching of unknown methods to redis connection object
    nateabele committed Sep 24, 2012
  2. @nateabele

    Merge pull request #655 from d1rk/auth-array-scalar

    allow auth adapters to return a single value instead of arrays
    nateabele committed Sep 24, 2012
  3. @d1rk
  4. @d1rk
Commits on Sep 21, 2012
  1. @nateabele
  2. @nateabele

    Supporting additional HTTP response codes, and correctly distinguishi…

    …ng between 406 and 415, `Media::handlers()` is public now.
    nateabele committed Sep 21, 2012
  3. @nateabele

    Merge pull request #650 from yitznewton/dev

    From Controller, look for view in own library
    nateabele committed Sep 21, 2012
Commits on Sep 19, 2012
  1. @yitznewton

    From Controller, look for view in own library

    To this point, li3 defaults to app/views. With this change, li3 looks by
    default in libraries/foo/views/, where foo is the library containing the
    Controller.
    
    remove newlines at EOF
    yitznewton committed Sep 19, 2012
Commits on Sep 18, 2012
  1. @nateabele

    Merge pull request #649 from ppadron/dev

    Services::patch() method + Content-Type fix in net\http\Request for PATCH
    nateabele committed Sep 18, 2012
  2. @ppadron
  3. @ppadron
  4. @nateabele

    Merge pull request #648 from ppadron/dev

    Data for PATCH requests in net\http\Service should be encoded in the request body. Fixes #647.
    nateabele committed Sep 18, 2012
  5. @ppadron
  6. @nateabele
  7. @ericcholis @nateabele

    Extend Request.php to include Http Proxy support

    Extended Request.php to allow for configurable Http Proxy support when using 'context' format. See http://www.php.net/manual/en/function.stream-context-create.php#92586
    ericcholis committed with nateabele Jul 30, 2012
  8. @nateabele

    Merge pull request #646 from mehlah/lithium-app-phar

    Update phar-packaged app layout.
    nateabele committed Sep 18, 2012
Commits on Sep 17, 2012
  1. @mehlah @mehlah

    Update phar-packaged app layout.

    mehlah committed with mehlah Sep 17, 2012
Commits on Sep 14, 2012
  1. @nateabele

    Merge pull request #641 from ppadron/dev

    Return handlers in net\http\Service and support for $path and $data in HEAD requests
    nateabele committed Sep 14, 2012
  2. @ppadron

    Implementing return handlers in net\http\Service and adding support f…

    …or $path and $data to HEAD requests. Closes #640.
    ppadron committed Sep 14, 2012
Commits on Sep 13, 2012
  1. @nateabele
  2. @nateabele

    Ensuring full docblocks are presented in console `Help` command for b…

    …oth classes and methods. Misc. code cleanup.
    nateabele committed Sep 13, 2012
  3. @nateabele