Created by: dependabot[bot]
Bumps github.com/gin-gonic/gin from 1.7.6 to 1.7.7.
Release notes
Sourced from github.com/gin-gonic/gin's releases.
Release v1.7.7
BUGFIXES
- Fixed X-Forwarded-For unsafe handling of CVE-2020-28483 #2844, closed issue #2862
- Tree: updated the code logic for
latestNode#2897, closed issue #2894 #2878- Tree: fixed the misplacement of adding slashes #2847, closed issue #2843
- Tree: fixed tsr with mixed static and wildcard paths #2924, closed issue #2918
ENHANCEMENTS
- TrustedProxies: make it backward-compatible #2887, closed issue #2819
- TrustedPlatform: provide custom options for another CDN services #2906
DOCS
- NoMethod: added usage annotation (#2832)
Changelog
Sourced from github.com/gin-gonic/gin's changelog.
Gin v1.7.7
BUGFIXES
- Fixed X-Forwarded-For unsafe handling of CVE-2020-28483 #2844, closed issue #2862.
- Tree: updated the code logic for
latestNode#2897, closed issue #2894 #2878.- Tree: fixed the misplacement of adding slashes #2847, closed issue #2843.
- Tree: fixed tsr with mixed static and wildcard paths #2924, closed issue #2918.
ENHANCEMENTS
- TrustedProxies: make it backward-compatible #2887, closed issue #2819.
- TrustedPlatform: provide custom options for another CDN services #2906.
DOCS
- NoMethod: added usage annotation (#2832).
Commits
-
84d927bchore(docs): Bump to v1.7.7 (#2952) -
2d3572aUpdate version.go (#2923) -
ae6f7a3fix tsr with mixed static and wildcard paths (#2924) -
bb945cffix the misplacement of adding slashes (#2847) -
a3f0872Provide custom options of TrustedPlatform for another CDN services (#2906) -
b5ad462Update the code logic for latestNode in tree.go (#2897) -
3b555a5ClientIP: check every proxy for trustiness (#2844) -
fc5d6ddTidy: Complete TrustedProxies feature (#2887) -
7d20914Quick Fix c.ClientIP() mistakely parsing to 127.0.0.1 for who not using r.Run... -
4ad9526Fix grammatical and spelling errors in context.go (#2883) - Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebasewill rebase this PR -
@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it -
@dependabot mergewill merge this PR after your CI passes on it -
@dependabot squash and mergewill squash and merge this PR after your CI passes on it -
@dependabot cancel mergewill cancel a previously requested merge and block automerging -
@dependabot reopenwill reopen this PR if it is closed -
@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) -
@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)