Permalink
Commits on Mar 17, 2016
  1. @tenderlove

    Merge pull request #1033 from mastahyeti/same-site-cookies

    Update first-party-only cookie syntax
    tenderlove committed Mar 17, 2016
Commits on Mar 15, 2016
  1. @mastahyeti

    first-party cookies are now same-site cookies

    remove use of `:first_party` option
    
    pass along provided value
    
    make the syntax more flexible
    
    s/strict/Strict/
    mastahyeti committed Mar 15, 2016
Commits on Mar 13, 2016
  1. @raggi

    Merge pull request #1027 from rack/default-server

    Puma should be the default webserver for rackup
    raggi committed Mar 13, 2016
Commits on Mar 11, 2016
  1. @matthewd

    Merge pull request #1029 from rthbound/fixes-951-fixes-1015

    Fixes 951 fixes 1015
    matthewd committed Mar 11, 2016
Commits on Mar 8, 2016
  1. @rthbound

    Fixes #1015

      - Handles the edge case
      - Adds a test for #1015
    rthbound committed Mar 5, 2016
Commits on Mar 7, 2016
  1. @gjtorikian

    Tweak `nil` `HTTP_AUTHORIZATION` test

    gjtorikian committed Mar 7, 2016
  2. @gjtorikian

    Change `provided?` to provide validation, too

    Although `authorization_key` is not `nil`, its value might be. Because
    of this, a `params` split later on fails with a `NoMethodError`.
    gjtorikian committed Mar 7, 2016
  3. @gjtorikian
Commits on Mar 5, 2016
  1. @conzett @rthbound

    Add more failing specs for ararys

    conzett committed with rthbound Feb 12, 2016
  2. @conzett @rthbound

    Fix normalize_params parsing arrays of hashes

    Account for child_key being a key representing a nested hash
    Closes rack/rack#951
    conzett committed with rthbound Oct 19, 2015
  3. @eins78 @rthbound

    add failing test for rack/rack#951

    eins78 committed with rthbound Sep 21, 2015
Commits on Mar 3, 2016
  1. @raggi

    Merge pull request #1026 from geemus/secure-auth-examples

    use secure_compare in auth examples
    raggi committed Mar 3, 2016
Commits on Mar 2, 2016
  1. @raggi

    Puma should be the default webserver for rackup

     * Thin is based on fully unmaintained code (EM)
     * Puma is significantly faster, on a tuned 16 core VM the difference is 50kqps.
    raggi committed Mar 2, 2016
  2. @geemus
Commits on Feb 23, 2016
  1. @tenderlove

    Merge pull request #1009 from WojtekKruszewski/missing_empty_params

    Missing empty multipart params
    tenderlove committed Feb 23, 2016
Commits on Feb 3, 2016
  1. @mperham

    Remove json gem

    The json gem has been included in Ruby stdlib since 1.9.  The gem itself causes difficulties building on Windows so depending on the gem is actually a net negative these days.
    mperham committed Feb 3, 2016
Commits on Feb 2, 2016
  1. @spastorino

    Merge pull request #995 from gfvcastro/update-license

    Update license.
    spastorino committed Feb 2, 2016
Commits on Feb 1, 2016
  1. @gfvcastro

    Update license.

    gfvcastro committed Feb 1, 2016
  2. @WojtekKruszewski

    Don't skip empty multipart params

    WojtekKruszewski committed Feb 1, 2016
Commits on Jan 31, 2016
  1. @spastorino

    Merge pull request #1008 from deepj/drop-jruby-1.7

    Drop JRuby 1.7 support on Travis since Rack 2.0 requires Ruby 2.2.2+
    spastorino committed Jan 31, 2016
  2. @spastorino

    Merge pull request #1006 from jeremyevans/fstring

    Work with ruby 2.3's --enable-frozen-string-literal
    spastorino committed Jan 31, 2016
Commits on Jan 30, 2016
  1. @WojtekKruszewski

    Add failing test for missing empty mulitpart params

    WojtekKruszewski committed Jan 30, 2016
Commits on Jan 29, 2016
  1. @deepj

    Drop JRuby 1.7 support on Travis since Rack 2.0 requires Ruby 2.2.2+

    JRuby 1.7 supports only Ruby 1.9 or 1.8.7
    deepj committed Jan 29, 2016
Commits on Jan 28, 2016
  1. @jeremyevans

    Work with ruby 2.3's --enable-frozen-string-literal

    These changes are the minimal ones necessary to allow Forme's specs
    to pass. There may well be other changes that are required.
    jeremyevans committed Jan 28, 2016
Commits on Jan 25, 2016
  1. @manveru

    Merge pull request #1004 from kou/unuse-thread-exclusive

    Use Mutex instead of Thread.exclusive for reloader
    manveru committed Jan 25, 2016
  2. @raggi

    Merge pull request #1003 from rack/unity3d_multipart_bug

    Strip quotes from around multipart encodings
    raggi committed Jan 25, 2016
  3. @kou
Commits on Jan 23, 2016
  1. @raggi

    Fix #905 by stripping quotes from around encodings

    raggi committed Jan 23, 2016
Commits on Jan 16, 2016
  1. @eileencodes

    Move empty hash to it's own method for session

    This sets the session's default to a new method called `default_session`
    which is set to an empty hash.
    
    Now we can depend on the `default_session` method rather than depending
    on the implementation of `Hash`.
    eileencodes committed Jan 16, 2016
Commits on Jan 10, 2016
  1. @spastorino

    Merge pull request #996 from zach-taylor/insert-to-unshift

    Use unshift(...) instead of insert(0, ...)
    spastorino committed Jan 10, 2016
  2. @zach-taylor
Commits on Jan 4, 2016
  1. @spastorino

    Merge pull request #983 from gfvcastro/test-ruby-2-2-4

    Test against Ruby 2.2.4 on Travis.
    spastorino committed Jan 4, 2016
Commits on Jan 2, 2016
  1. @gfvcastro
Commits on Jan 1, 2016
  1. @matthewd

    Merge pull request #981 from michaelsauter/fix/load-for-read

    Load session for read before accessing keys or values
    matthewd committed Jan 1, 2016
Commits on Dec 27, 2015
  1. @spastorino

    Merge pull request #994 from deepj/travis

    Test against Ruby 2.3.0 and JRuby 9.0.4.0
    spastorino committed Dec 27, 2015