Revision history for Perl extension HTTP::Headers::Fast

0.12
        - Strip out empty lines separated by CRLF.(markstos)
            Before the patch, an embedded CRLF would be allowed through with a
            space added after it. This is spec-compliant but appears not to be
            the intent, based on the regex to remove empty lines in headers.  If
            a client accepted "CRLF\sCRLF\s" as a valid header end, then a CRLF
            injection attack would have been possible.
            (This patch was ported from the HTTP::Headers git repo. )

            The possiblity of the former behavior exploitably seems particular small
    . Apache
            won't even send out header that a space between the two required CRLFs.


0.11

        - added 'sub isa' hack.
          (suggested by miyagawa++)

0.10

        - oops. I forgot to remove 'use Test::Warn' orz.
          (reported by miyagawa++)

0.09

        - no changes...

0.07

        - don't depend to Test::Warn

0.06

        - fixed bugs in test code.
          0.05 doesn't works with older version of HTTP::Headers

0.05

        - hmm... this module requires HTTP::Date

0.04

        - added as_string_without_sort

0.03

        - load Storable lazily. Storable doesn't needed in a lot of case.

0.02

        - updated docs(by lestrrat++)

0.01    Tue Nov 11 01:16:13 2008
        - original version
