* To prevent malicious web servers from reading arbitrary files
from the client, files must now be opened explicitly by the
user in order to upload their contents in form submission.
This remediates CVE-2023-34457
* Added support for Python 3.11.
* Allow submitting a form with no submit element. This can be
achieved by passing ``submit=False`` to
``StatefulBrowser.submit_selected``. Thanks @alexreg! [#480]
- Update to version 1.2.0
Add support for HTML form-associated elements
which exposed more local information than users may have been expecting. [#375]
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-MechanicalSoup?expand=0&rev=19
- Update to version 1.2.0
* Main changes
Added support for Python 3.10.
Add support for HTML form-associated elements
(i.e. input elements that are associated with a form by a form attribute, but are not a child element of the form.) [#380]
* Bug fixes
When uploading a file, only the filename is now submitted to the server. Previously, the full file path was being submitted,
which exposed more local information than users may have been expecting. [#375]
OBS-URL: https://build.opensuse.org/request/show/1009955
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-MechanicalSoup?expand=0&rev=15
* Added support for Python 3.8 and 3.9.
* ``StatefulBrowser`` has new properties ``page``, ``form``, and ``url``,
which can be used in place of the methods ``get_current_page``,
``get_current_form`` and ``get_url`` respectively
* ``StatefulBrowser.form`` will raise an ``AttributeError`` instead of
returning ``None`` if no form has been selected yet.
* Decompose ``<select>`` elements with the same name when adding a new
input element to a form.
* The ``params`` and ``data`` kwargs passed to ``submit`` will now properly
be forwarded to the underlying request for GET methods (whereas previously
``params`` was being overwritten by ``data``).
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-MechanicalSoup?expand=0&rev=13
* bs4-47.patch
- Update to 0.11.0:
* Constructing a Form instance from a bs4.element.Tag whose tag name is not form will now emit a warning, and may be deprecated in the future. [#228]
* Breaking Change: LinkNotFoundError now derives from Exception instead of BaseException. While this will bring the behavior in line with most people's expectations, it may affect the behavior of your code if you were heavily relying on this implementation detail in your exception handling. [#203]
* Improve handling of button submit elements. Will now correctly ignore buttons of type button and reset during form submission, since they are not considered to be submit elements. [#199]
* Do a better job of inferring the content type of a response if the Content-Type header is not provided. [#195]
* Improve consistency of query string construction between MechanicalSoup and web browsers in edge cases where form elements have duplicate name attributes. This prevents errors in valid use cases, and also makes MechanicalSoup more tolerant of invalid HTML. [#158]
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-MechanicalSoup?expand=0&rev=7
