Update to drupal 8.0.0-rc1. For more information, see https://www.drupal.org/node/2582663
This commit is contained in:
Greg Anderson
parent
eb34d130a8
commit
f32e58e4b1
8476 changed files with 211648 additions and 170042 deletions
302
vendor/zendframework/zend-diactoros/CHANGELOG.md
vendored
Normal file
302
vendor/zendframework/zend-diactoros/CHANGELOG.md
vendored
Normal file
|
|
@ -0,0 +1,302 @@
|
|||
# Changelog
|
||||
|
||||
All notable changes to this project will be documented in this file, in reverse chronological order by release.
|
||||
|
||||
## 1.1.3 - 2015-08-10
|
||||
|
||||
### Added
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- [#71](https://github.com/zendframework/zend-diactoros/pull/71) fixes the
|
||||
docblock of the `JsonResponse` constructor to typehint the `$data` argument
|
||||
as `mixed`.
|
||||
- [#73](https://github.com/zendframework/zend-diactoros/pull/73) changes the
|
||||
behavior in `Request` such that if it marshals a stream during instantiation,
|
||||
the stream is marked as writeable (specifically, mode `wb+`).
|
||||
- [#85](https://github.com/zendframework/zend-diactoros/pull/85) updates the
|
||||
behavior of `Zend\Diactoros\Uri`'s various `with*()` methods that are
|
||||
documented as accepting strings to raise exceptions on non-string input.
|
||||
Previously, several simply passed non-string input on verbatim, others
|
||||
normalized the input, and a few correctly raised the exceptions. Behavior is
|
||||
now consistent across each.
|
||||
- [#87](https://github.com/zendframework/zend-diactoros/pull/87) fixes
|
||||
`UploadedFile` to ensure that `moveTo()` works correctly in non-SAPI
|
||||
environments when the file provided to the constructor is a path.
|
||||
|
||||
## 1.1.2 - 2015-07-12
|
||||
|
||||
### Added
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- [#67](https://github.com/zendframework/zend-diactoros/pull/67) ensures that
|
||||
the `Stream` class only accepts `stream` resources, not any resource.
|
||||
|
||||
## 1.1.1 - 2015-06-25
|
||||
|
||||
### Added
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- [#64](https://github.com/zendframework/zend-diactoros/pull/64) fixes the
|
||||
behavior of `JsonResponse` with regards to serialization of `null` and scalar
|
||||
values; the new behavior is to serialize them verbatim, without any casting.
|
||||
|
||||
## 1.1.0 - 2015-06-24
|
||||
|
||||
### Added
|
||||
|
||||
- [#52](https://github.com/zendframework/zend-diactoros/pull/52),
|
||||
[#58](https://github.com/zendframework/zend-diactoros/pull/58),
|
||||
[#59](https://github.com/zendframework/zend-diactoros/pull/59), and
|
||||
[#61](https://github.com/zendframework/zend-diactoros/pull/61) create several
|
||||
custom response types for simplifying response creation:
|
||||
|
||||
- `Zend\Diactoros\Response\HtmlResponse` accepts HTML content via its
|
||||
constructor, and sets the `Content-Type` to `text/html`.
|
||||
- `Zend\Diactoros\Response\JsonResponse` accepts data to serialize to JSON via
|
||||
its constructor, and sets the `Content-Type` to `application/json`.
|
||||
- `Zend\Diactoros\Response\EmptyResponse` allows creating empty, read-only
|
||||
responses, with a default status code of 204.
|
||||
- `Zend\Diactoros\Response\RedirectResponse` allows specifying a URI for the
|
||||
`Location` header in the constructor, with a default status code of 302.
|
||||
|
||||
Each also accepts an optional status code, and optional headers (which can
|
||||
also be used to provide an alternate `Content-Type` in the case of the HTML
|
||||
and JSON responses).
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- [#43](https://github.com/zendframework/zend-diactoros/pull/43) removed both
|
||||
`ServerRequestFactory::marshalUri()` and `ServerRequestFactory::marshalHostAndPort()`,
|
||||
which were deprecated prior to the 1.0 release.
|
||||
|
||||
### Fixed
|
||||
|
||||
- [#29](https://github.com/zendframework/zend-diactoros/pull/29) fixes request
|
||||
method validation to allow any valid token as defined by [RFC
|
||||
7230](http://tools.ietf.org/html/rfc7230#appendix-B). This allows usage of
|
||||
custom request methods, vs a static, hard-coded list.
|
||||
|
||||
## 1.0.5 - 2015-06-24
|
||||
|
||||
### Added
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- [#60](https://github.com/zendframework/zend-diactoros/pull/60) fixes
|
||||
the behavior of `UploadedFile` when the `$errorStatus` provided at
|
||||
instantiation is not `UPLOAD_ERR_OK`. Prior to the fix, an
|
||||
`InvalidArgumentException` would occur at instantiation due to the fact that
|
||||
the upload file was missing or invalid. With the fix, no exception is raised
|
||||
until a call to `moveTo()` or `getStream()` is made.
|
||||
|
||||
## 1.0.4 - 2015-06-23
|
||||
|
||||
This is a security release.
|
||||
|
||||
A patch has been applied to `Zend\Diactoros\Uri::filterPath()` that ensures that
|
||||
paths can only begin with a single leading slash. This prevents the following
|
||||
potential security issues:
|
||||
|
||||
- XSS vectors. If the URI path is used for links or form targets, this prevents
|
||||
cases where the first segment of the path resembles a domain name, thus
|
||||
creating scheme-relative links such as `//example.com/foo`. With the patch,
|
||||
the leading double slash is reduced to a single slash, preventing the XSS
|
||||
vector.
|
||||
- Open redirects. If the URI path is used for `Location` or `Link` headers,
|
||||
without a scheme and authority, potential for open redirects exist if clients
|
||||
do not prepend the scheme and authority. Again, preventing a double slash
|
||||
corrects the vector.
|
||||
|
||||
If you are using `Zend\Diactoros\Uri` for creating links, form targets, or
|
||||
redirect paths, and only using the path segment, we recommend upgrading
|
||||
immediately.
|
||||
|
||||
### Added
|
||||
|
||||
- [#25](https://github.com/zendframework/zend-diactoros/pull/25) adds
|
||||
documentation. Documentation is written in markdown, and can be converted to
|
||||
HTML using [bookdown](http://bookdown.io). New features now MUST include
|
||||
documentation for acceptance.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- [#51](https://github.com/zendframework/zend-diactoros/pull/51) fixes
|
||||
`MessageTrait::getHeaderLine()` to return an empty string instead of `null` if
|
||||
the header is undefined (which is the behavior specified in PSR-7).
|
||||
- [#57](https://github.com/zendframework/zend-diactoros/pull/57) fixes the
|
||||
behavior of how the `ServerRequestFactory` marshals upload files when they are
|
||||
represented as a nested associative array.
|
||||
- [#49](https://github.com/zendframework/zend-diactoros/pull/49) provides several
|
||||
fixes that ensure that Diactoros complies with the PSR-7 specification:
|
||||
- `MessageInterface::getHeaderLine()` MUST return a string (that string CAN be
|
||||
empty). Previously, Diactoros would return `null`.
|
||||
- If no `Host` header is set, the `$preserveHost` flag MUST be ignored when
|
||||
calling `withUri()` (previously, Diactoros would not set the `Host` header
|
||||
if `$preserveHost` was `true`, but no `Host` header was present).
|
||||
- The request method MUST be a string; it CAN be empty. Previously, Diactoros
|
||||
would return `null`.
|
||||
- The request MUST return a `UriInterface` instance from `getUri()`; that
|
||||
instance CAN be empty. Previously, Diactoros would return `null`; now it
|
||||
lazy-instantiates an empty `Uri` instance on initialization.
|
||||
- [ZF2015-05](http://framework.zend.com/security/advisory/ZF2015-05) was
|
||||
addressed by altering `Uri::filterPath()` to prevent emitting a path prepended
|
||||
with multiple slashes.
|
||||
|
||||
## 1.0.3 - 2015-06-04
|
||||
|
||||
### Added
|
||||
|
||||
- [#48](https://github.com/zendframework/zend-diactoros/pull/48) drops the
|
||||
minimum supported PHP version to 5.4, to allow an easier upgrade path for
|
||||
Symfony 2.7 users, and potential Drupal 8 usage.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- Nothing.
|
||||
|
||||
## 1.0.2 - 2015-06-04
|
||||
|
||||
### Added
|
||||
|
||||
- [#27](https://github.com/zendframework/zend-diactoros/pull/27) adds phonetic
|
||||
pronunciation of "Diactoros" to the README file.
|
||||
- [#36](https://github.com/zendframework/zend-diactoros/pull/36) adds property
|
||||
annotations to the class-level docblock of `Zend\Diactoros\RequestTrait` to
|
||||
ensure properties inherited from the `MessageTrait` are inherited by
|
||||
implementations.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
-
|
||||
### Fixed
|
||||
|
||||
- [#41](https://github.com/zendframework/zend-diactoros/pull/41) fixes the
|
||||
namespace for test files to begin with `ZendTest` instead of `Zend`.
|
||||
- [#46](https://github.com/zendframework/zend-diactoros/pull/46) ensures that
|
||||
the cookie and query params for the `ServerRequest` implementation are
|
||||
initialized as arrays.
|
||||
- [#47](https://github.com/zendframework/zend-diactoros/pull/47) modifies the
|
||||
internal logic in `HeaderSecurity::isValid()` to use a regular expression
|
||||
instead of character-by-character comparisons, improving performance.
|
||||
|
||||
## 1.0.1 - 2015-05-26
|
||||
|
||||
### Added
|
||||
|
||||
- [#10](https://github.com/zendframework/zend-diactoros/pull/10) adds
|
||||
`Zend\Diactoros\RelativeStream`, which will return stream contents relative to
|
||||
a given offset (i.e., a subset of the stream). `AbstractSerializer` was
|
||||
updated to create a `RelativeStream` when creating the body of a message,
|
||||
which will prevent duplication of the stream in-memory.
|
||||
- [#21](https://github.com/zendframework/zend-diactoros/pull/21) adds a
|
||||
`.gitattributes` file that excludes directories and files not needed for
|
||||
production; this will further minify the package for production use cases.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- [#9](https://github.com/zendframework/zend-diactoros/pull/9) ensures that
|
||||
attributes are initialized to an empty array, ensuring that attempts to
|
||||
retrieve single attributes when none are defined will not produce errors.
|
||||
- [#14](https://github.com/zendframework/zend-diactoros/pull/14) updates
|
||||
`Zend\Diactoros\Request` to use a `php://temp` stream by default instead of
|
||||
`php://memory`, to ensure requests do not create an out-of-memory condition.
|
||||
- [#15](https://github.com/zendframework/zend-diactoros/pull/15) updates
|
||||
`Zend\Diactoros\Stream` to ensure that write operations trigger an exception
|
||||
if the stream is not writeable. Additionally, it adds more robust logic for
|
||||
determining if a stream is writeable.
|
||||
|
||||
## 1.0.0 - 2015-05-21
|
||||
|
||||
First stable release, and first release as `zend-diactoros`.
|
||||
|
||||
### Added
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Deprecated
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Removed
|
||||
|
||||
- Nothing.
|
||||
|
||||
### Fixed
|
||||
|
||||
- Nothing.
|
||||
Reference in a new issue