- Updated urllib3 to 1.12 (at least)
- Fixed Python 3 compatibility issue (see #59 and #61). Thanks @stefanklug and @macro1!
- Reorder header prior to httplib request. Host should be always the first
request header.
- Added support to Django 1.9 (dropped support to Django 1.6)
- Added get_request_headers to make easier to set and override request headers
- Bug fixed: property preventing to set upstream and diazo_rules (#53, #54) [@vdemin]
- Security issue fixed: when colon is present at URL path urljoin ignores the upstream and the request is redirected to the path itself allowing content injection
- Fixed connections pools
- Use wsgiref to check for hop-by-hop headers [#50]
- Refactored tests
- Fixed security issue that allowed remote-user header injection
- Added extras_require to make easier diazo installation
- Alow to send context dict to transformation template. [@chaws, @macartur]
- Use StringIO intead of BytesIO on theme compilation (transformation)
Thanks @rafamanzo for the reports.
- Append a backslash on upstream when needed
- Validate upstream URL to make sure it has a scheme
- Added branch test coverage
- More permissive URL scheme (#41).
- Refactored code to allow setting custom headers by extending method (#40) [@marciomazza]
- urllib2 replaced by urllib3 (#10)
- No Diazo transformation if header X-Diazo-Off is set to true - either request or response (#15)
- Removed double memory usage when reading response body (#16)
- Fixed bug caused by many set-cookies coming from upstream (#23) - by @thiagovsk and @macartur
- Added stream support for serving big files with an acceptable memory footprint (#17 and #24). Thanks to @lucasmoura, @macartur, @carloshfoliveira and @thiagovsk.
- Moved Diazo functionalities to DiazoProxyView.
- Logging improved (#21).
- Added options for default_content_type and retries [@gldnspud].
- Sphinx docs (#25).
- 100% test coverage.