Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request.
If you need to, you can also or
learn more about diff comparisons.
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
Learn more about diff comparisons here.
...
- 5 commits
- 8 files changed
- 1 contributor
Commits on Oct 7, 2025
Commits on Oct 9, 2025
Commits on Oct 10, 2025
-
Improper handling of proxy headers in
Rack::Sendfilemay allow prox……y bypass. - Ignore `HTTP_X_SENDFILE_TYPE` header from requests to prevent attackers from enabling sendfile features. - Only read `HTTP_X_ACCEL_MAPPING` when `x-accel-redirect` is explicitly configured and no app-level mappings exist. - Prefer `\A` instead of `^` to match the start of path mappings.
-
Unbounded read in
Rack::Requestform parsing can lead to memory exh……austion. - Limit read to `query_parser.bytesize_limit`.
-
Loading
This comparison is taking too long to generate.
Unfortunately it looks like we can’t render this comparison for you right now. It might be too big, or there might be something weird with your repository.
You can try running this command locally to see the comparison on your machine:
git diff v3.2.2...v3.2.3