drupalcampbristol/web/vendor/zendframework/zend-diactoros/CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file, in reverse chronological order by release.

1.4.0 - 2017-04-06

Added

• #219 adds two new classes, Zend\Diactoros\Request\ArraySerializer and Zend\Diactoros\Response\ArraySerializer. Each exposes the static methods toArray() and fromArray(), allowing de/serialization of messages from and to arrays.

• #236 adds two new constants to the Response class: MIN_STATUS_CODE_VALUE and MAX_STATUS_CODE_VALUE.

Changes

• #240 changes the behavior of ServerRequestFactory::fromGlobals() when no $cookies argument is present. Previously, it would use $_COOKIES; now, if a Cookie header is present, it will parse and use that to populate the instance instead.

  This change allows utilizing cookies that contain period characters (.) in their names (PHP's built-in cookie handling renames these to replace . with _, which can lead to synchronization issues with clients).

• #235 changes the behavior of Uri::__toString() to better follow proscribed behavior in PSR-7. In particular, prior to this release, if a scheme was missing but an authority was present, the class was incorrectly returning a value that did not include a // prefix. As of this release, it now does this correctly.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• Nothing.

1.3.11 - 2017-04-06

Added

• Nothing.

Changes

• #241 changes the constraint by which the package provides psr/http-message-implementation to simply 1.0 instead of ~1.0.0, to follow how other implementations provide PSR-7.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #161 adds additional validations to header names and values to ensure no malformed values are provided.

• #234 fixes a number of reason phrases in the Response instance, and adds automation from the canonical IANA sources to ensure any new phrases added are correct.

1.3.10 - 2017-01-23

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #226 fixed an issue with the SapiStreamEmitter causing the response body to be cast to (string) and also be read as a readable stream, potentially producing double output.

1.3.9 - 2017-01-17

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #223 #224 fixed an issue with the SapiStreamEmitter consuming too much memory when producing output for readable bodies.

1.3.8 - 2017-01-05

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #222 fixes the SapiStreamEmitter's handling of the Content-Range header to properly only emit a range of bytes if the header value is in the form bytes {first-last}/length. This allows using other range units, such as items, without incorrectly emitting truncated content.

1.3.7 - 2016-10-11

Added

• #208 adds several missing response codes to Zend\Diactoros\Response, including:
  • 226 ('IM used')
  • 308 ('Permanent Redirect')
  • 444 ('Connection Closed Without Response')
  • 499 ('Client Closed Request')
  • 510 ('Not Extended')
  • 599 ('Network Connect Timeout Error')
• #211 adds support for UTF-8 characters in query strings handled by Zend\Diactoros\Uri.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• Nothing.

1.3.6 - 2016-09-07

Added

• #170 prepared documentation for publication at https://zendframework.github.io/zend-diactoros/
• #165 adds support for Apache REDIRECT_HTTP_* header detection in the ServerRequestFactory.
• #166 adds support for UTF-8 characters in URI paths.
• #204 adds testing against PHP 7.1 release-candidate builds.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #186 fixes a typo in a variable name within the SapiStreamEmitter.
• #200 updates the SapiStreamEmitter to implement a check for isSeekable() prior to attempts to rewind; this allows it to work with non-seekable streams such as the CallbackStream.
• #169 ensures that response serialization always provides a \r\n\r\n sequence following the headers, even when no message body is present, to ensure it conforms with RFC 7230.
• #175 updates the Request class to set the Host header from the URI host if no header is already present. (Ensures conformity with PSR-7 specification.)
• #197 updates the Uri class to ensure that string serialization does not include a colon after the host name if no port is present in the instance.

1.3.5 - 2016-03-17

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #160 fixes HTTP protocol detection in the ServerRequestFactory to work correctly with HTTP/2.

1.3.4 - 2016-03-17

Added

• #119 adds the 451 (Unavailable for Legal Reasons) status code to the Response class.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #117 provides validation of the HTTP protocol version.
• #127 now properly removes attributes with null values when calling withoutAttribute().
• #132 updates the ServerRequestFactory to marshal the request path fragment, if present.
• #142 updates the exceptions thrown by HeaderSecurity to include the header name and/or value.
• #148 fixes several stream operations to ensure they raise exceptions when the internal pointer is at an invalid position.
• #151 ensures URI fragments are properly encoded.

1.3.3 - 2016-01-04

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #135 fixes the behavior of ServerRequestFactory::marshalHeaders() to no longer omit Cookie headers from the aggregated headers. While the values are parsed and injected into the cookie params, it's useful to have access to the raw headers as well.

1.3.2 - 2015-12-22

Added

• #124 adds four more optional arguments to the ServerRequest constructor:
  • array $cookies
  • array $queryParams
  • null|array|object $parsedBody
  • string $protocolVersion ServerRequestFactory was updated to pass values for each of these parameters when creating an instance, instead of using the related with*() methods on an instance.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #122 updates the ServerRequestFactory to retrieve the HTTP protocol version and inject it in the generated ServerRequest, which previously was not performed.

1.3.1 - 2015-12-16

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #113 fixes an issue in the response serializer, ensuring that the status code in the deserialized response is an integer.
• #115 fixes an issue in the various text-basd response types (TextResponse, HtmlResponse, and JsonResponse); due to the fact that the constructor was not rewinding the message body stream, getContents() was thus returning null, as the pointer was at the end of the stream. The constructor now rewinds the stream after populating it in the constructor.

1.3.0 - 2015-12-15

Added

• #110 adds Zend\Diactoros\Response\SapiEmitterTrait, which provides the following private method definitions:
  • injectContentLength()
  • emitStatusLine()
  • emitHeaders()
  • flush()
  • filterHeader() The SapiEmitter implementation has been updated to remove those methods and instead compose the trait.
• #111 adds a new emitter implementation, SapiStreamEmitter; this emitter type will loop through the stream instead of emitting it in one go, and supports content ranges.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• Nothing.

1.2.1 - 2015-12-15

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #101 fixes the withHeader() implementation to ensure that if the header existed previously but using a different casing strategy, the previous version will be removed in the cloned instance.
• #103 fixes the constructor of Response to ensure that null status codes are not possible.
• #99 fixes validation of header values submitted via request and response constructors as follows:
  • numeric (integer and float) values are now properly allowed (this solves some reported issues with setting Content-Length headers)
  • invalid header names (non-string values or empty strings) now raise an exception.
  • invalid individual header values (non-string, non-numeric) now raise an exception.

1.2.0 - 2015-11-24

Added

• #88 updates the SapiEmitter to emit a Content-Length header with the content length as reported by the response body stream, assuming that StreamInterface::getSize() returns an integer.
• #77 adds a new response type, Zend\Diactoros\Response\TextResponse, for returning plain text responses. By default, it sets the content type to text/plain; charset=utf-8; per the other response types, the signature is new TextResponse($text, $status = 200, array $headers = []).
• #90 adds a new Zend\Diactoros\CallbackStream, allowing you to back a stream with a PHP callable (such as a generator) to generate the message content. Its constructor accepts the callable: $stream = new CallbackStream($callable);

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #77 updates the HtmlResponse to set the charset to utf-8 by default (if no content type header is provided at instantiation).

1.1.4 - 2015-10-16

Added

• #98 adds JSON_UNESCAPED_SLASHES to the default json_encode flags used by Zend\Diactoros\Response\JsonResponse.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #96 updates withPort() to allow null port values (indicating usage of default for the given scheme).
• #91 fixes the logic of withUri() to do a case-insensitive check for an existing Host header, replacing it with the new one.

1.1.3 - 2015-08-10

Added

• #73 adds caching of the vendor directory to the Travis-CI configuration, to speed up builds.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #71 fixes the docblock of the JsonResponse constructor to typehint the $data argument as mixed.
• #73 changes the behavior in Request such that if it marshals a stream during instantiation, the stream is marked as writeable (specifically, mode wb+).
• #85 updates the behavior of Zend\Diactoros\Uri's various with*() methods that are documented as accepting strings to raise exceptions on non-string input. Previously, several simply passed non-string input on verbatim, others normalized the input, and a few correctly raised the exceptions. Behavior is now consistent across each.
• #87 fixes UploadedFile to ensure that moveTo() works correctly in non-SAPI environments when the file provided to the constructor is a path.

1.1.2 - 2015-07-12

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #67 ensures that the Stream class only accepts stream resources, not any resource.

1.1.1 - 2015-06-25

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #64 fixes the behavior of JsonResponse with regards to serialization of null and scalar values; the new behavior is to serialize them verbatim, without any casting.

1.1.0 - 2015-06-24

Added

• #52, #58, #59, and #61 create several custom response types for simplifying response creation:

  • Zend\Diactoros\Response\HtmlResponse accepts HTML content via its constructor, and sets the Content-Type to text/html.
  • Zend\Diactoros\Response\JsonResponse accepts data to serialize to JSON via its constructor, and sets the Content-Type to application/json.
  • Zend\Diactoros\Response\EmptyResponse allows creating empty, read-only responses, with a default status code of 204.
  • Zend\Diactoros\Response\RedirectResponse allows specifying a URI for the Location header in the constructor, with a default status code of 302.

  Each also accepts an optional status code, and optional headers (which can also be used to provide an alternate Content-Type in the case of the HTML and JSON responses).

Deprecated

• Nothing.

Removed

• #43 removed both ServerRequestFactory::marshalUri() and ServerRequestFactory::marshalHostAndPort(), which were deprecated prior to the 1.0 release.

Fixed

• #29 fixes request method validation to allow any valid token as defined by RFC 7230. This allows usage of custom request methods, vs a static, hard-coded list.

1.0.5 - 2015-06-24

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #60 fixes the behavior of UploadedFile when the $errorStatus provided at instantiation is not UPLOAD_ERR_OK. Prior to the fix, an InvalidArgumentException would occur at instantiation due to the fact that the upload file was missing or invalid. With the fix, no exception is raised until a call to moveTo() or getStream() is made.

1.0.4 - 2015-06-23

This is a security release.

A patch has been applied to Zend\Diactoros\Uri::filterPath() that ensures that paths can only begin with a single leading slash. This prevents the following potential security issues:

• XSS vectors. If the URI path is used for links or form targets, this prevents cases where the first segment of the path resembles a domain name, thus creating scheme-relative links such as //example.com/foo. With the patch, the leading double slash is reduced to a single slash, preventing the XSS vector.
• Open redirects. If the URI path is used for Location or Link headers, without a scheme and authority, potential for open redirects exist if clients do not prepend the scheme and authority. Again, preventing a double slash corrects the vector.

If you are using Zend\Diactoros\Uri for creating links, form targets, or redirect paths, and only using the path segment, we recommend upgrading immediately.

Added

• #25 adds documentation. Documentation is written in markdown, and can be converted to HTML using bookdown. New features now MUST include documentation for acceptance.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #51 fixes MessageTrait::getHeaderLine() to return an empty string instead of null if the header is undefined (which is the behavior specified in PSR-7).
• #57 fixes the behavior of how the ServerRequestFactory marshals upload files when they are represented as a nested associative array.
• #49 provides several fixes that ensure that Diactoros complies with the PSR-7 specification:
  • MessageInterface::getHeaderLine() MUST return a string (that string CAN be empty). Previously, Diactoros would return null.
  • If no Host header is set, the $preserveHost flag MUST be ignored when calling withUri() (previously, Diactoros would not set the Host header if $preserveHost was true, but no Host header was present).
  • The request method MUST be a string; it CAN be empty. Previously, Diactoros would return null.
  • The request MUST return a UriInterface instance from getUri(); that instance CAN be empty. Previously, Diactoros would return null; now it lazy-instantiates an empty Uri instance on initialization.
• ZF2015-05 was addressed by altering Uri::filterPath() to prevent emitting a path prepended with multiple slashes.

1.0.3 - 2015-06-04

Added

• #48 drops the minimum supported PHP version to 5.4, to allow an easier upgrade path for Symfony 2.7 users, and potential Drupal 8 usage.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• Nothing.

1.0.2 - 2015-06-04

Added

• #27 adds phonetic pronunciation of "Diactoros" to the README file.
• #36 adds property annotations to the class-level docblock of Zend\Diactoros\RequestTrait to ensure properties inherited from the MessageTrait are inherited by implementations.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #41 fixes the namespace for test files to begin with ZendTest instead of Zend.
• #46 ensures that the cookie and query params for the ServerRequest implementation are initialized as arrays.
• #47 modifies the internal logic in HeaderSecurity::isValid() to use a regular expression instead of character-by-character comparisons, improving performance.

1.0.1 - 2015-05-26

Added

• #10 adds Zend\Diactoros\RelativeStream, which will return stream contents relative to a given offset (i.e., a subset of the stream). AbstractSerializer was updated to create a RelativeStream when creating the body of a message, which will prevent duplication of the stream in-memory.
• #21 adds a .gitattributes file that excludes directories and files not needed for production; this will further minify the package for production use cases.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• #9 ensures that attributes are initialized to an empty array, ensuring that attempts to retrieve single attributes when none are defined will not produce errors.
• #14 updates Zend\Diactoros\Request to use a php://temp stream by default instead of php://memory, to ensure requests do not create an out-of-memory condition.
• #15 updates Zend\Diactoros\Stream to ensure that write operations trigger an exception if the stream is not writeable. Additionally, it adds more robust logic for determining if a stream is writeable.

1.0.0 - 2015-05-21

First stable release, and first release as zend-diactoros.

Added

• Nothing.

Deprecated

• Nothing.

Removed

• Nothing.

Fixed

• Nothing.