README.rdoc in rack-1.3.3 vs README.rdoc in rack-1.3.4
- old
+ new
@@ -359,9 +359,18 @@
* Fix bug with broken query parameters in Rack::ShowExceptions
* Rack::Request#cookies no longer swallows exceptions on broken input
* Prevents XSS attacks enabled by bug in Ruby 1.8's regexp engine
* Rack::ConditionalGet handles broken If-Modified-Since helpers
+* September 16, 2011: Eighteenth public release 1.2.4
+ * Fix a bug with MRI regex engine to prevent XSS by malformed unicode
+
+* October 1, 2011: Nineteenth public release 1.3.4
+ * Backport security fix from 1.9.3, also fixes some roundtrip issues in URI
+ * Small documentation update
+ * Fix an issue where BodyProxy could cause an infinite recursion
+ * Add some supporting files for travis-ci
+
== Contact
Please post bugs, suggestions and patches to
the bug tracker at <http://github.com/rack/rack/issues>.