CppCMS 0.99.7 Rleased

Security Bugs:

• Fixed incorrect key parsing caused reduced entropy of AES and HMAC keys
• Fixed incorrect HMAC key definition when using separate keys for CBC and MAC

All users are encouraged to upgrade to latest version, if not possible do following:

• Use session.client.key or session.client.key_file over separate session.client.cbc and session.client.hmac or session.client.cbc_key and session.client.hmac_file

  Note: if you use session.client.hmac or session.client.hmac_file only - MAC authentication without encryption then the problem does not affects you.

• Increase secret key size by at least 1.5 - this is relevant for both encryption and hmac authentication.

New Features:

• URL Mapping - the opposite of URL Dispatching is created, now every URL can be easily abstracted from the physical URL,

  It allows creating hierarchies of applications and referring each other using named URL.

• Caching system:

  • Added support of dependent triggers recording using cppcms::triggers_recorder class
  • Added cache support at templates level
  • Added "tee" filter for better caching support of HTML fragments

• Template System

  • Provided basic unit-testing
  • Provided access too application that renders the view, giving basics for access to many features like sessions, cache and so on.
  • Added <% url ... %>, <% cache ...%>, <% trigger ... %> tags
  • Improved error reporting
  • Added <%= variable | filters%> style of rendering to allow override reserved words and variables

• Updated Message Board example to use url mapping

• Boost.Locale features:

  • Default locale is UTF-8 on windows
  • Support of Gregorian calendar for non-ICU backends
  • Support of checking if the time is in daylight savings time to the calendar
  • Performance optimization in formatting and collation

• Redesigned booster::socket class, split into set of smaller classes according to their roles

• Optimization for embedded builds adds support of removing of modules that may be not useful for embedded applications:

  • Cache storage, prefork storage, distributed cache storage
  • GZip compression

• Support of graceful shutdown of fastcgi process by Apache on Windows using libfastcgi waiting style

• Improved boost::thread api to support detach member function

• Booster: support of timegm, making booster::ptime symmetric.

Bugs:

• Fixed bug #3177531 - invalid port/ip returned in CGI headers when using "list" of apis
• Cleanup of set() property, make sure it is set to false only in cases where it is really needed, and turn it on by default on most widgets Fixing F.R. #3177317
• Changed warning level to -Wall -Wextra, warnings cleanup
• Boost.Locale - workaround of ICU time zone detection bug
• Fixed incorrect rendering of input form when pointer involved
• Fixed issue with urandom device when running with limited user under Windows
• Fixes of MSVC-2005 issues

Pages

• About This Project
• My Open Source Astronomy Projects

Categories

• Progress
• Storage
• Benchmarks
• Templates
• FastCGI
• Framework
• Cache
• Berkeley DB
• Comet
• Unicode and Localization
• Off Topic