Pywb

Latest version: v2.8.3

Safety actively analyzes 630130 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 8 of 16

0.31.0

Not secure
~~~~~~~~~~~~~~~~~~~~~~

* HTML rewriting:
- preserve empty attrs while parsing, eg. ``<tag attr>`` instead of ``<tag attr="">``
- empty ``srcset`` attribute does not cause errors
- better error checking of empty attributes for all custom parsers

* wombat/client side improvements:
- use ``postMessage()`` for inner replay frame -> outer frame updates
- Fix ``window.open()`` rewriting even if prototype is missing
- Fix double-slash in relative url rewriting
- ``Math.random()`` overrides uses correct window

* BufferedReader improvements:
- More lenient of partially decompressed data, return what was decompressed instead of raising exception.
- Support Brotli decompression, properly rewrite ``Content-Encoding: br``

* Python 2/3 Compatibility:
- Decode all cdx fields to native string in py2

* BlockLoader improvements:
- support custom profile urls, eg. ``profile+http://`` which allow a custom profile to be selected if a profile loader is registered via ``BlockLoader.set_profile_loader()``

- s3 loader: support profiles and AWS creds directly set in username/password of url

* POST replay improvements:
- support ``multipart/form-data`` encoding same as ``x-www-form-urlencoded``
- support ``application/x-amf`` with experimental AMF rewriter (RewriteContentAMF rewriter)
- support generic post-data matching exact base64 encoded value.

0.30.1

Not secure
~~~~~~~~~~~~~~~~~~~~~~

* Rules: match rule for Twitter video.

* Record Loader: Only parse ``http:`` and ``https:`` urls as HTTP in ``response``, ``request`` and ``revisit`` records.

0.30.0

Not secure
~~~~~~~~~~~~~~~~~~~~~~

* Support for Python 3.3+ in addition to Python 2.6+

* statusheaders: ``to_str()`` and ``to_bytes()`` to reconstruct status line and headers, with option to exclude certain headers

* cdxobject improvements:
- ``conv_to_json()`` for serializing to json, with optional list of fields
- ``to_json()`` and ``to_cdxj()``
- Default JSON serialization includes all fields, except starting with ``_``
- Default CDXJ serialization includes all fields, except urlkey and timestamp
- Comparison operators for cdxobject
- Reading cdxline as byte buffer, individual fields as strings (python 3)

* redis: full testing of ``zrangebylex`` with new fakeredis

* timeutils: add ``datetime_to_iso_date``

* cdx indexing refactor: rename ``DefaultRecordIter`` -> ``DefaultRecordParser``, a callable which creates an iterator

* warcrecord loader fully read streams with no content-length, don't force 204

* cookie improvements:
- use httplib cookie pairs directly to avoid concatenated headers (eg. for ``Set-Cookie``)
- don't remove ``max-age`` and ``expires`` when in live rewriting mode
- convert `` UTC`` -> `` GMT`` in expires to avoid Python parsing issues
- remove ``secure`` only if not serving from https
- support custom cookie rewriter

* wombat/client side improvements:
- rewrite ``frameElement`` -> ``WB_wombat_frameElement``, set to null for top replay frame
- Allow changing of ``document.domain``
- Rewrite ``<form action>`` and <input value>`` in ``rewrite_elem``

* Tests: improved tests, replaced doctests of dict output to regular tests for improved compatibility with different python implementations

0.11.5

Not secure
~~~~~~~~~~~~~~~~~~~~~~

* cdx index bug fix: fix bug with cdx indexing with post-append when WARC request and response records do not alternate in the WARC.

* load yaml config: ensure file stream gets closed.

* zipnum: resolve paths specified in zipnum .loc file relative to the .loc file, not to application root.

0.11.4

Not secure
~~~~~~~~~~~~~~~~~~~~~~

* wombat: overrides ``window.crypto.getRandomValues()`` to use predictable 'random' values for improved
replayability in many JS applications.

* fix gevent/uwsgi: run ``gevent.monkey.patch_all()`` explicitly when loading ``pywb.apps.wayback`` if ``GEVENT_MONKEY_PATCH=1`` env var is set. Set by default in ``uwsgi.ini`` for use with uwsgi. (Was previously relying on uwsgi ``gevent-early-monkey-patch`` but this flag is not yet available until uwsgi 2.1 is released).

0.11.3

Not secure
~~~~~~~~~~~~~~~~~~~~~~

* rewrite: fix typo in ``<meta content="">`` rewrite (modifier was not being set)

Page 8 of 16

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.