Wsgidav

Latest version: v4.3.3

Safety actively analyzes 682387 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 6

4.1.0

- 246 Add dir_browser/htdocs folder setup.cfg (for install with `pip install .`)
- 265 Fix PAM not threadsafe
- 268 Use relative paths to support reverse proxies
- Clarify how to use WsgiDAV behind a reverse proxy
- `mount_path` option is now validated (must be empty or start with a '/')
- Add `dir_browser.directory_slash` option to force trailing slashes (default: true).
Also use relative paths in directory listings in order to improve behavior
when running behind a reverse proxy.
- 183 Fix MOVE for reverse proxies (experimental)
- Resolve security advisory [CVE-2022-41905](https://github.com/mar10/wsgidav/security/advisories/GHSA-xx6g-jj35-pxjv)
Thanks brunnjf (Jon Brunn)

4.0.2

Not secure
- 245 Add charset utf-8 to Content-Type header
- 246 Add dir_browser/htdocs folder to sdist (.tar.gz)
- 248 Provider does not support set_last_modified" error
- 251 Fix removing locks in recursive mode
- 255 Fix ERROR: Invalid requirement: 'cheroot~=8'
- 260 Fix Case-Sensitivity issue on MOVE/COPY actions through Windows DAV
- Add shelve support to MSI installer (persistent lock- and property storage)
- Deprecate Python 3.6 (i.e. stop testing)

4.0.1

Not secure
- 241: Add SSL libs to MSI installer

4.0.0

Not secure
**Breaking Changes**

- Drop Python 2 support
- Drop support for Python syntax in config files (wsgidav.conf)
- Drop support for Microsoft Web Folders (option `dir_browser.ms_mount`).
- API now sometimes enforces some _named_ keyword args (`fn(<args>, *, ...)`)
- Rename option `lock_manager` to `lock_storage`
- Moved `lock_manager` and `lock_storage` modules to `lock_man` package.
- Move logging options to 'logging' section
- Drop flup and CherryPy support from CLI (use cheroot instead of CherryPy)

**New Features**

- Add CORS support
- hotfixes.re_encode_path_info is true by default (null evaluates to false now!)
- Add uvicorn server support to CLI
- `lock_storage`, `property_manager`, `provider_mapping`
can now be configured in the YAML file to use custom implementations using
this syntax:
`{ "class": <class_path>, "args": [<arg>, ...], "kwargs": {"<arg_name>": <val>, ... } }`

**Other changes**

- Provider root paths are evaluated relative to the location of the configuration
file
- DAVCollection, DAVNonCollection, DAVProvider are now ABCs.
- Deprecate hotfixes.winxp_accept_root_share_login and hotfixes.win_accept_anonymous_options
- DirBrowser supports `?davmount` URLs by default (option `dir_browser.davmount`).
The new option `dir_browser.davmount_links` controls link display (default: false).
- 185 Fix FileLikeQueue for Python 3
- 222 Discrepancy between "getetag" property and ETag header

3.1.2

3.1.1

Not secure
- 201 Check also HTTP_X_FORWARDED_HOST as alternative to DESTINATION header
- 216 Build with Python 3.8 (Py3.9 doesn't work on Windows7 / Windows Server 2008 R2 / earlier)
- 220 Fix exception whenever users access unknown realm
- 225 Include changelog in PyPI package

Page 2 of 6

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.