Changelog for
ruby2.5-rubygem-faye-1.4.0-150400.1.5.x86_64.rpm :
* Fri Sep 25 2020 cooloAATTsuse.comupdated to version 1.4.0 see installed CHANGELOG.md [#]## 1.4.0 / 2020-07-31 - Implement TLS certificate verification and enable it by default in the Ruby client class `Faye::Client` - Add a `:tls` option to the Ruby client with sub-field `:verify_peer` for configuring TLS verification - Officially support the `tls` option in the Node.js client, whose contents are forward to the `https` and `tls` modules as appropriate [#]## 1.3.0 / 2020-06-08 - Support `user:passAATT` authorization in URIs and send `Authorization` headers from the Node HTTP transport - Support IPv6 hostnames in URIs - Allow credentials (cookies and `Authorization` headers) in cross-origin requests, by: - setting `Access-Control-Allow-Origin` to the value of the `Origin` header (not `
*`) - enabling `Access-Control-Allow-Credentials` - Enable credentials when sending cross-origin requests - Don\'t disconnect WebSocket on page unload if `autodisconnect` is turned off - Catch errors when creating a WebSocket, which happens when Content Security Policy blocks it, allowing other transports to be tried - Fix a bug in the client where it handles messages from other clients as though they\'re the server\'s response to its own messages, based on the `id` field; now we only treat messages as server responses if they contain `successful: true` - Stop sending an empty message list `[]` from the WebSocket client as a keep-alive mechanism since CometD does not accept this message - Fix deprecation warnings for using the `new Buffer()` constructor - Switch to the Apache 2.0 license
* Thu May 07 2020 cooloAATTsuse.com- updated to version 1.2.5 see installed CHANGELOG.md [#]## 1.2.5 / 2020-04-28
* Fix `/meta/
*` channel recognition bug in the server that enables authentication bypass
* https://blog.jcoglan.com/2020/04/28/authentication-bypass-in-faye/
* Sun Jan 29 2017 cooloAATTsuse.com- updated to version 1.2.4 see installed CHANGELOG.md [#]## 1.2.4 / 2017-01-28
* Fix `RackAdapter#get_client` that was failing due to a URI error
* Define `Promise#catch` in a safe way for old browsers
* Log errors in the Node HTTP transport
* Wed Oct 12 2016 cooloAATTsuse.com- updated to version 1.2.3 see installed CHANGELOG.md [#]## 1.2.3 / 2016-10-11
* Return an error if the `data` field is missing on published messages
* Fix errors that occur in the new `websocket` util when the browser does not support WebSocket
* Tue Jul 19 2016 cooloAATTsuse.com- updated to version 1.2.2 see installed CHANGELOG.md [#]## 1.2.2 / 2016-07-18
* Mitigate the HTTPoxy vulnerability: https://httpoxy.org/
* Thu Jun 30 2016 cooloAATTsuse.com- updated to version 1.2.1 see installed CHANGELOG.md [#]## 1.2.1 / 2016-06-29
* Fix a missing variable error in `NodeAdapter`
* Mon Jun 27 2016 cooloAATTsuse.com- updated to version 1.2.0 see installed CHANGELOG.md [#]## 1.2.0 / 2016-06-26
* Add `client.subscribe().withChannel()` to yield the message channel for wildcard subscriptions
* Restructure the JavaScript codebase around Node modules (require/exports) rather than globals
* Update the Promise shim to reflect the standard API, including `catch()` and `all()`
* Support connecting to servers that use SNI in the Ruby client
* Make the JavaScript client work inside React Native and Web Workers
* Remove JSON2; you should import a JSON shim yourself if necessary
* Handle errors that occur when a message is partially delivered via EventSource
* Reject requests with invalid (non-array or -object) top-level JSON values
* Make local client requests asynchronous to avoid re-entrant request handling errors
* Remove `Connection: Close` from HTTP responses to allow use of keep-alive
* Use `XMLHttpRequest` in preference to the ActiveX API in IE10
* Fix bug where flushing large message batches puts promises in an invalid state
* Mon Jul 20 2015 cooloAATTsuse.com- updated to version 1.1.2 see installed CHANGELOG.md [#]## 1.1.2 / 2015-07-19
* Allow the `Authorization` header to be used on CORS requests
* Disallow unused methods like PUT and DELETE on CORS requests
* Stop IE prematurely garbage-collecting `XDomainRequest` objects
* Make sure messages can be sent if they overflow the request size limit and the outbox is empty
* Don\'t send messages over WebSockets unless they are in the \'open\' ready-state
* Fix a bug preventing use of the in-process transport in Ruby
* Wed Feb 25 2015 cooloAATTsuse.com- updated to version 1.1.1
* Mon Feb 09 2015 cooloAATTsuse.com- updated to version 1.1.0
* Allow the server and client to use WebSocket extensions, for example permessage-deflate
* Support the `HTTP_PROXY` and `HTTPS_PROXY` environment variables to send all client connections through an HTTP proxy
* Introduce the `Scheduler` API to allow the user to control message retries
* Add the `attempts` and `deadline` options to `Client#publish()`
* Let `RackAdapter` take a block that yields the instance, so extensions can be added to middleware
* Allow monitoring listeners to see the `clientId` on publishd messages but still avoid sending it to subscribers
* Return a promise from `Client#disconnect()`
* Fix client-side retry bugs causing the client to flood the server with duplicate messages
* Send all transport types in the `supportedConnectionTypes` handshake parameter
* Don\'t close WebSockets when the client recovers from an error and sends a new `clientId`
* Replace `cookiejar` with `tough-cookie` to avoid global variable leaks [#]## 1.0.3 / 2014-07-08
* Make some changes to JSON-P responses to mitigate the Rosetta Flash attack
* http://miki.it/blog/2014/7/8/abusing-jsonp-with-rosetta-flash/
