3.0.1

• Enforce body size limit also for compressed responses. This is a protection measure against malicious servers as described here.

3.0.0

• Initial release based on Amp v2.
• Refactored to streamed bodies using Amp\ByteStream\Message.
• Improved redirect handling that doesn't repeat unsafe requests to other hosts.
• Various other minor changes.

2.0.6

Security and maintenance release.

• Security: Previously cookies of foo.bar.example.com were leaked to foo.bar. Additionally, any site could set cookies for any other site. Artax follows newer browser implementations now. Cookies can only be set on domains higher or equal to the current domain, but not on any public suffixes.
• Added Notify::HANDSHAKE_COMPLETE to allow e.g. inspecting the crypto information.

1.0.6

Security and maintenance release.

• Security: Previously cookies of foo.bar.example.com were leaked to foo.bar. Additionally, any site could set cookies for any other site. Artax follows newer browser implementations now. Cookies can only be set on domains higher or equal to the current domain, but not on any public suffixes.
• Added Notify::HANDSHAKE_COMPLETE to allow e.g. inspecting the crypto information.

Important note: The 1.x branch is discontinued. Please upgrade to version 2.x.

2.0.5

v2.0.5

- Fix requests that use IPv6 addresses as host in the URL directly

1.0.5

v1.0.5

- Fix requests that use IPv6 addresses as host in the URL directly

2.0.4

Fix CVE-2016-5385 "httpoxy"

# Conflicts:
#	CHANGELOG.md

1.0.4

v1.0.4

Fix CVE-2016-5385 "httpoxy"

2.0.3

Prevent (buggy) rewrite of URI query strings

Prepare tag 2.0.3

1.0.3

Prevent (buggy) rewrite of URI query strings

Prepare tag 1.0.3