Posted By: Eric Wong
Date: 2011-12-06 03:01
Summary: clogger 1.1.0 - more escaping!
Project: clogger
Clogger is Rack middleware for logging HTTP requests. The log format is customizable so you can specify exactly which fields to log.
* http://clogger.rubyforge.org/ * clogger@librelist.org />* git://bogomips.org/clogger.git
Changes:
This release fixes potential vulnerabilities when escape sequences are viewed in certain terminals.
The 0x7F-0xFF byte range is escaped to match behavior of nginx 1.0.9+, as some character sets may have escape characters in that range.
$cookie_* values are now escaped to be consistent with the behavior of the $http_cookie value. All users of $cookie_* in their log format must upgrade (of course there may be no Clogger users other than myself, and I don't use $cookie_*) |
|