Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: rack/rack
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v3.2.4
Choose a base ref
...
head repository: rack/rack
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v3.2.5
Choose a head ref
  • 4 commits
  • 6 files changed
  • 4 contributors

Commits on Feb 12, 2026

  1. Fix MockResponse#body when the body is a Proc (#2420) 

    - Ensure streaming response body is closed by `Rack::MockResponse`. (#2423)
    @tavianator @ioquatix
    tavianator authored and ioquatix committed Feb 12, 2026
    Configuration menu
    Copy the full SHA
    3b8b0d2 View commit details
    Browse the repository at this point in the history

Commits on Feb 16, 2026

  1. XSS injection via malicious filename in Rack::Directory. 

    Without this, if the file started with a URL scheme, it would not
be treated as a relative link.
    @jeremyevans @ioquatix
    jeremyevans authored and ioquatix committed Feb 16, 2026
    Configuration menu
    Copy the full SHA
    93a68f5 View commit details
    Browse the repository at this point in the history

  2. Prevent directory traversal via root prefix bypass.

    @Masamuneee @ioquatix
    Masamuneee authored and ioquatix committed Feb 16, 2026
    Configuration menu
    Copy the full SHA
    f9bde3b View commit details
    Browse the repository at this point in the history

  3. Bump patch version.

    @ioquatix
    ioquatix committed Feb 16, 2026
    Configuration menu
    Copy the full SHA
    bb5f355 View commit details
    Browse the repository at this point in the history
Loading