python/python-colander
SHA256
15
0
Fork 0
forked from pool/python-colander
Code Pull Requests Activity

Accepting request 672555 from home:frispete:python

Browse Source 
- Update to 1.7.0 (2019-02-01)
  + The URL validator regex has been updated to no longer be
    vulnerable to a catastrophic backtracking that would have led to
    an infinite loop.
    See https://github.com/Pylons/colander/pull/323
    and https://github.com/Pylons/colander/issues/290. 
    With thanks to Przemek (https://github.com/p-m-k).
  + This does change the behaviour of the URL validator and it no 
    longer supports file:// URI scheme 
    (https://tools.ietf.org/html/rfc8089). Users that wish to validate
    file:// URI’s should change their validator to use
    colander.file_uri instead.
  + It has also dropped support for alternate schemes outside of
    http/ftp (and their secure equivelants). Please let us know if we
    need to relax this requirement.
  + CVE-ID: CVE-2017-18361
  + The Email validator has been updated to use the same regular
    expression that is used by the WhatWG HTML specification, thereby
    increasing the email addresses that will validate correctly from
    web forms submitted.
    See https://github.com/Pylons/colander/pull/324
    and https://github.com/Pylons/colander/issues/283
  + Number once again will allow you to serialize None to colander.null,
    this reverts an accidental revert.
    See https://github.com/Pylons/colander/issues/204#issuecomment-459556100
  + Integer SchemaType now supports an optional strict mode that will
    validate that the number is an integer, rather than silently accepting
    floats and truncating.
    See https://github.com/Pylons/colander/pull/322
    and https://github.com/Pylons/colander/issues/292

OBS-URL: https://build.opensuse.org/request/show/672555
OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-colander?expand=0&rev=8
This commit is contained in:
Tomáš Chvátal
2019-02-08 11:13:50 +00:00
committed by Git OBS Bridge
parent 7540199334
commit 3133c42b0f
4 changed files with 70 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
python-colander.spec
View File

@@ -1,8 +1,8 @@
#
# spec file for package python-colander
#
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2018 LISA GmbH, Bingen, Germany.
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
# Copyright (c) 2013-2019 LISA GmbH, Bingen, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -19,7 +19,7 @@
%{?!python_module:%define python_module() python-%{**} python3-%{**}}
Name: python-colander
Version: 1.4
Version: 1.7.0
Release: 0
Summary: A schema-based serialization and deserialization library
License: BSD-4-Clause AND ZPL-2.1 AND MIT