Bump flask-cors from 3.0.8 to 3.0.10
Bumps flask-cors from 3.0.8 to 3.0.10.
Release notes
Sourced from flask-cors's releases.
Release 3.0.10
- Adds support for PPC64 and ARM64 builds for distribution. Thanks @sreekanth370
- Fixes warnings for invalid escape sequences Thanks @tirkarthi
Release 3.0.9
Security
- Escape path before evaluating resource rules (thanks @praetorian-colby-morgan). Prior to this, flask-cors incorrectly evaluated CORS resource matching before path expansion. E.g. "/api/../foo.txt" would incorrectly match resources for "/api/*" whereas the path actually expands simply to "/foo.txt"
Changelog
Sourced from flask-cors's changelog.
3.0.10
Adds support for PPC64 and ARM64 builds for distribution. Thanks @sreekanth370
3.0.9
Security
- Escape path before evaluating resource rules (thanks to Colby Morgan). Prior to this, flask-cors incorrectly evaluated CORS resource matching before path expansion. E.g. "/api/../foo.txt" would incorrectly match resources for "/api/*" whereas the path actually expands simply to "/foo.txt"
Commits
-
9fae3e5
Release 3.0.10 (#288) -
9a504db
Adds Arm64 support (#287) -
e10d82c
Adds ppc64le distribution(#286) -
c53512b
Fix warnings regarding invalid escape sequences. (#260) -
13c6b6b
Add docs requirement -
aa822c3
Improve documentation and clarify how to use app-configuration (#277) -
285cf12
Remove pytest DeprecationWarnings (#276) -
91babb9
Update Api docs for credentialed requests (#221) -
522d989
Release version 3.0.9 (#273) -
67c4b2c
Fix request path normalization (#272) - Additional commits viewable in compare view