Skip to content

Bump flask-cors from 3.0.8 to 3.0.10

Bumps flask-cors from 3.0.8 to 3.0.10.

Release notes

Sourced from flask-cors's releases.

Release 3.0.10

  • Adds support for PPC64 and ARM64 builds for distribution. Thanks @sreekanth370
  • Fixes warnings for invalid escape sequences Thanks @tirkarthi

Release 3.0.9

Security

  • Escape path before evaluating resource rules (thanks @praetorian-colby-morgan). Prior to this, flask-cors incorrectly evaluated CORS resource matching before path expansion. E.g. "/api/../foo.txt" would incorrectly match resources for "/api/*" whereas the path actually expands simply to "/foo.txt"
Changelog

Sourced from flask-cors's changelog.

3.0.10

Adds support for PPC64 and ARM64 builds for distribution. Thanks @sreekanth370

3.0.9

Security

  • Escape path before evaluating resource rules (thanks to Colby Morgan). Prior to this, flask-cors incorrectly evaluated CORS resource matching before path expansion. E.g. "/api/../foo.txt" would incorrectly match resources for "/api/*" whereas the path actually expands simply to "/foo.txt"
Commits

Merge request reports