Webob

Latest version: v1.8.9

Safety actively analyzes 706259 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 9

1.2a2

---------

* ``req.script_name`` and ``path_info`` now contain text, not bytes.

* Deprecated ``uscript_name`` and ``upath_info``.

* ``charset`` argument to ``Request`` as well as the attribute can only
be set to UTF-8 or the value already present in the ``Content-Type`` header.

* ``unicode_errors`` attribute of ``Request`` and related functionality is gone.

* To process requests that come in an encoding different from UTF-8, the request
needs to be transcoded like this: ``req = req.decode('windows-1251')``

* Added support for weak ETag matching in conditional responses.

* Most of etag-related functionality was refactored.

1.2a1

---------

* Python 3.2 compatibility.

* No longer compatible with Python 2.5 (only 2.6, 2.7, and 3.2 are supported).

* Switched VCS from Mercurial to Git

* Moved development to `GitHub <https://github.com/Pylons/webob>`_

* Added full history from PyCon 2011 sprint to the repository

* Change ``LimitedLengthFile`` and ``FakeCGIBody`` to inherit from
``io.RawIOBase`` and benefit from ``io.BufferedReader``.

* Do not set ``resp.request`` in ``req.get_response(app)``

* ``Response.request`` and ``.environ`` attrs are deprecated and raise exceptions
when used.

* Deprecated request attributes ``str_GET``, ``str_POST``, ``str_cookies`` and
``str_params`` now raise exceptions when touched.

* Remove testing dependency on WebTest.

* Remove UnicodeMultiDict class; the result of ``Request.GET`` and
``Request.POST`` is now just a plain ``MultiDict``.

* The ``decode_param_names`` Request constructor argument has been removed,
along with the ``Request.decode_param_names`` attribute.

* The ``Request.as_string()`` method is now better known as
``Request.as_bytes()``.

* The ``Request.from_string()`` method is now better known as
``Request.from_bytes()``.

* A new method named ``Request.as_text()`` now exists.

* A new method named ``Request.from_text()`` now exists.

* The ``webob.dec.wsgify`` repr() is now much less informative, but a lot
easier to test and maintain.

1.1.1

Not secure
---------

* Fix disconnect detection being incorrect in some cases (`issue 21
<https://bitbucket.org/ianb/webob/issues/21>`_).

* Fix exception when calling ``.accept.best_match(..)`` on a header containing
``'*'`` (instead of ``'*/*'``).

* Extract some of the ``Accept`` code into subclasses (``AcceptCharset``,
``AcceptLanguage``).

* Improve language matching so that the app can now offer a generic
language code and it will match any of the accepted dialects
(``'en' in AcceptLanguage('en-gb')``).

* Normalize locale names when matching
(``'en_GB' in AcceptLanguage('en-gb')``).

* Deprecate ``etag.weak_match(..)``.

* Deprecate ``Response.request`` and ``Response.environ`` attrs.

1.1

Not secure
---------

* Remove deprecation warnings for ``unicode_body`` and ``ubody``.

1.1rc1

Not secure
---------

* Deprecate ``Response.ubody`` / ``.unicode_body`` in favor of new ``.text`` attribute
(the old names will be removed in 1.3 or even later).

* Make ``Response.write`` much more efficient (`issue 18
<https://bitbucket.org/ianb/webob/issues/18>`_).

* Make sure copying responses does not reset Content-Length or Content-MD5 of the
original (and that of future copies).

* Change ``del res.body`` semantics so that it doesn't make the response invalid,
but only removes the response body.

* Remove ``Response._body`` so the ``_app_iter`` is the only representation.

1.1b2

Not secure
---------

* Add detection for browser / user-agent disconnects. If the client disconnected
before sending the entire request body (POST / PUT), ``req.POST``, ``req.body``
and other related properties and methods will raise an exception.
Previously this caused the application get a truncated request with no indication that it
is incomplete.

* Make ``Response.body_file`` settable. This is now valid:
``Response(body_file=open('foo.bin'), content_type=...)``

* Revert the restriction on req.body not being settable for GET and some
other requests. Such requests actually can have a body according to HTTP BIS
(see also `commit message <https://bitbucket.org/ianb/webob/commits/b3ef34c57936>`_)

* Add support for file upload testing via ``Request.blank(POST=..)``. Patch contributed by
Tim Perevezentsev. See also:
`ticket <https://bitbucket.org/ianb/webob/issues/15>`_,
`changeset <https://bitbucket.org/ianb/webob/commits/4ba9ab0c3f99>`_.

* Deprecate ``req.str_GET``, ``str_POST``, ``str_params`` and ``str_cookies`` (warning).


* Deprecate ``req.decode_param_names`` (warning).

* Change ``req.decode_param_names`` default to ``True``. This means that ``.POST``, ``.GET``,
``.params`` and ``.cookies`` keys are now unicode. This is necessary for WebOb to behave
as close as possible on Python 2 and Python 3.

Page 4 of 9

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.