Skip to content

Commit f8fff78

Browse files
committed
docs: add changes for upcoming version
Signed-off-by: Maximilian Bösing <2189546+boesing@users.noreply.github.com>
1 parent ba98fb1 commit f8fff78

File tree

1 file changed

+1
-8
lines changed

1 file changed

+1
-8
lines changed

CHANGELOG.md

Lines changed: 1 addition & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,4 @@
22

33
## Added
44

5-
- Adds `UriIntegrationTest::testGetPathNormalizesMultipleLeadingSlashesToSingleSlashToPreventXSS()`, `UriIntegrationTest::testStringRepresentationWithMultipleSlashes(array $test)`, and `RequestIntegrationTest::testGetRequestTargetInOriginFormNormalizesUriWithMultipleLeadingSlashesInPath()`.
6-
These validate that a path containing multiple leading slashes is (a) represented with a single slash when calling `UriInterface::getPath()`, and (b) represented without changes when calling `UriInterface::__toString()`, including when calling `RequestInterface::getRequestTarget()` (which returns the path without the URI authority by default, to comply with origin-form).
7-
This is done to validate mitigations for [CVE-2015-3257](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3257).
8-
9-
## Changed
10-
11-
- Modifies `UriIntegrationTest::testPathWithMultipleSlashes()` to only validate multiple slashes in the middle of a path.
12-
Multiple leading slashes are covered with the newly introduced tests.
5+
- Support for `psr/http-message` v2

0 commit comments

Comments
 (0)