diff options
author | Bert Belder <bertbelder@gmail.com> | 2012-09-04 18:24:20 +0400 |
---|---|---|
committer | Ben Noordhuis <info@bnoordhuis.nl> | 2012-09-04 23:15:39 +0400 |
commit | 6174ea6b4cc95dd2b6fbd0d8d5a82d37e736c4b5 (patch) | |
tree | 7dcdfb9f432c39c03a77ae5086009643e3726ec0 /doc | |
parent | 9f57e422cf15fbd1abdaa7795d373058ea9ee133 (diff) |
doc: don't use '
Ref: #3964
Diffstat (limited to 'doc')
-rw-r--r-- | doc/blog/release/node-version-0-7-9-unstable.md | 2 | ||||
-rw-r--r-- | doc/blog/release/version-0-6-11-stable.md | 6 | ||||
-rw-r--r-- | doc/blog/release/version-0-6-12-stable.md | 4 | ||||
-rw-r--r-- | doc/blog/release/version-0-6-14-stable.md | 6 | ||||
-rw-r--r-- | doc/blog/release/version-0-6-15-stable.md | 4 | ||||
-rw-r--r-- | doc/blog/release/version-0-6-16-stable.md | 2 | ||||
-rw-r--r-- | doc/blog/release/version-0-6-18-stable.md | 6 | ||||
-rw-r--r-- | doc/blog/release/version-0-7-10-unstable.md | 2 | ||||
-rw-r--r-- | doc/blog/release/version-0-7-11-unstable.md | 4 | ||||
-rw-r--r-- | doc/blog/release/version-0-7-12.md | 2 | ||||
-rw-r--r-- | doc/blog/release/version-0-7-5-unstable.md | 2 | ||||
-rw-r--r-- | doc/blog/release/version-0-7-6-unstable.md | 4 | ||||
-rw-r--r-- | doc/blog/release/version-0-7-7-unstable.md | 8 | ||||
-rw-r--r-- | doc/blog/release/version-0-7-8-unstable.md | 4 | ||||
-rw-r--r-- | doc/blog/vulnerability/http-server-security-vulnerability-please-upgrade-to-0-6-17.md | 8 |
15 files changed, 32 insertions, 32 deletions
diff --git a/doc/blog/release/node-version-0-7-9-unstable.md b/doc/blog/release/node-version-0-7-9-unstable.md index 74076c04c46..683823aa3e7 100644 --- a/doc/blog/release/node-version-0-7-9-unstable.md +++ b/doc/blog/release/node-version-0-7-9-unstable.md @@ -22,7 +22,7 @@ slug: node-version-0-7-9-unstable </li> <li><p>fs: 64bit offsets for fs calls (Igor Zinkovsky)</p> </li> -<li><p>fs: add sync open flags 'rs' and 'rs+' (Kevin Bowman)</p> +<li><p>fs: add sync open flags 'rs' and 'rs+' (Kevin Bowman)</p> </li> <li><p>windows: enable creating directory junctions with fs.symlink (Igor Zinkovsky, Bert Belder)</p> </li> diff --git a/doc/blog/release/version-0-6-11-stable.md b/doc/blog/release/version-0-6-11-stable.md index 15fbe337c78..4c19a14995c 100644 --- a/doc/blog/release/version-0-6-11-stable.md +++ b/doc/blog/release/version-0-6-11-stable.md @@ -18,7 +18,7 @@ slug: version-0-6-11-stable </li> <li><p>tls: mitigate session renegotiation attacks (Ben Noordhuis)</p> </li> -<li><p>tcp, pipe: don't assert on uv_accept() errors (Ben Noordhuis)</p> +<li><p>tcp, pipe: don't assert on uv_accept() errors (Ben Noordhuis)</p> </li> <li><p>tls: Allow establishing secure connection on the existing socket (koichik)</p> </li> @@ -38,13 +38,13 @@ slug: version-0-6-11-stable </li> <li><p>dtrace: add missing translator (Dave Pacheco)</p> </li> -<li><p>unix: don't flush tty on switch to raw mode (Ben Noordhuis)</p> +<li><p>unix: don't flush tty on switch to raw mode (Ben Noordhuis)</p> </li> <li><p>windows: reset brightness when reverting to default text color (Bert Belder)</p> </li> <li><p>npm: update to 1.1.1</p> -<p>- Update which, fstream, mkdirp, request, and rimraf<br>- Fix #2123 Set path properly for lifecycle scripts on windows<br>- Mark the root as seen, so we don't recurse into it. Fixes #1838. (Martin Cooper)</p> +<p>- Update which, fstream, mkdirp, request, and rimraf<br>- Fix #2123 Set path properly for lifecycle scripts on windows<br>- Mark the root as seen, so we don't recurse into it. Fixes #1838. (Martin Cooper)</p> </li> </ul> diff --git a/doc/blog/release/version-0-6-12-stable.md b/doc/blog/release/version-0-6-12-stable.md index 3e5acd61c49..73e85eec306 100644 --- a/doc/blog/release/version-0-6-12-stable.md +++ b/doc/blog/release/version-0-6-12-stable.md @@ -18,7 +18,7 @@ slug: version-0-6-12-stable </li> <li><p>#2827 net: fix race write() before and after connect() (koichik)</p> </li> -<li><p>#2554 #2567 throw if fs args for 'start' or 'end' are strings (AJ ONeal)</p> +<li><p>#2554 #2567 throw if fs args for 'start' or 'end' are strings (AJ ONeal)</p> </li> <li><p>punycode: Update to v1.0.0 (Mathias Bynens)</p> </li> @@ -45,7 +45,7 @@ slug: version-0-6-12-stable - install: support --save with url install targets<br> - shrinkwrap: behave properly with url-installed modules<br> - support installing uncompressed tars or single file modules from urls etc.<br> -- don't run make clean on rebuild<br> +- don't run make clean on rebuild<br> - support HTTPS-over-HTTP proxy tunneling<br> </p> </li> diff --git a/doc/blog/release/version-0-6-14-stable.md b/doc/blog/release/version-0-6-14-stable.md index 4f33a2697eb..96877a2aa67 100644 --- a/doc/blog/release/version-0-6-14-stable.md +++ b/doc/blog/release/version-0-6-14-stable.md @@ -10,7 +10,7 @@ slug: version-0-6-14-stable </p> <ul> -<li><p>net: don't crash when queued write fails (Igor Zinkovsky)</p> +<li><p>net: don't crash when queued write fails (Igor Zinkovsky)</p> </li> <li><p>sunos: fix EMFILE on process.memoryUsage() (Bryan Cantrill)</p> </li> @@ -26,9 +26,9 @@ slug: version-0-6-14-stable <p> - upgrade node-gyp to 0.3.7<br> - work around AV-locked directories on Windows<br> -- Fix isaacs/npm#2293 Don't try to 'uninstall' /<br> +- Fix isaacs/npm#2293 Don't try to 'uninstall' /<br> - Exclude symbolic links from packages.<br> -- Fix isaacs/npm#2275 Spurious 'unresolvable cycle' error.<br> +- Fix isaacs/npm#2275 Spurious 'unresolvable cycle' error.<br> - Exclude/include dot files as if they were normal files </p> </li> diff --git a/doc/blog/release/version-0-6-15-stable.md b/doc/blog/release/version-0-6-15-stable.md index 4196876fe6d..5fa6bcf5867 100644 --- a/doc/blog/release/version-0-6-15-stable.md +++ b/doc/blog/release/version-0-6-15-stable.md @@ -18,13 +18,13 @@ slug: version-0-6-15-stable </li> <li><p>add 64bit offset fs functions (Igor Zinkovsky)</p> </li> -<li><p>windows: don't report ENOTSOCK when attempting to bind an udp handle twice (Bert Belder)</p> +<li><p>windows: don't report ENOTSOCK when attempting to bind an udp handle twice (Bert Belder)</p> </li> <li><p>windows: backport pipe-connect-to-file fixes from master (Bert Belder)</p> </li> <li><p>windows: never call fs event callbacks after closing the watcher (Bert Belder)</p> </li> -<li><p>fs.readFile: don't make the callback before the fd is closed (Bert Belder)</p> +<li><p>fs.readFile: don't make the callback before the fd is closed (Bert Belder)</p> </li> <li><p>windows: use 64bit offsets for uv_fs apis (Igor Zinkovsky)</p> </li> diff --git a/doc/blog/release/version-0-6-16-stable.md b/doc/blog/release/version-0-6-16-stable.md index 980296c1ab8..051a23af11f 100644 --- a/doc/blog/release/version-0-6-16-stable.md +++ b/doc/blog/release/version-0-6-16-stable.md @@ -34,7 +34,7 @@ slug: version-0-6-16-stable </li> <li><p>http_parser: Eat CRLF between requests, even on connection:close. (Ben Noordhuis)</p> </li> -<li><p>don't check return value of unsetenv (Ben Noordhuis)</p> +<li><p>don't check return value of unsetenv (Ben Noordhuis)</p> </li> </ul> <p>Source Code: <a href="http://nodejs.org/dist/v0.6.16/node-v0.6.16.tar.gz">http://nodejs.org/dist/v0.6.16/node-v0.6.16.tar.gz</a> diff --git a/doc/blog/release/version-0-6-18-stable.md b/doc/blog/release/version-0-6-18-stable.md index fe0c1f16637..13714d9c298 100644 --- a/doc/blog/release/version-0-6-18-stable.md +++ b/doc/blog/release/version-0-6-18-stable.md @@ -24,15 +24,15 @@ slug: version-0-6-18-stable </li> <li><p>#3258: fs.ReadStream.pause() emits duplicate data event (koichik)</p> </li> -<li><p>pipe_wrap: don't assert() on pipe accept errors (Ben Noordhuis)</p> +<li><p>pipe_wrap: don't assert() on pipe accept errors (Ben Noordhuis)</p> </li> <li><p>Better exception output for module load and process.nextTick (Felix Geisendörfer)</p> </li> <li><p>zlib: fix error reporting (Ben Noordhuis)</p> </li> -<li><p>http: Don't destroy on timeout (isaacs)</p> +<li><p>http: Don't destroy on timeout (isaacs)</p> </li> -<li><p>#3231: http: Don't try to emit error on a null'ed req object (isaacs)</p> +<li><p>#3231: http: Don't try to emit error on a null'ed req object (isaacs)</p> </li> <li><p>#3236: http: Refactor ClientRequest.onSocket (isaacs)</p> </li> diff --git a/doc/blog/release/version-0-7-10-unstable.md b/doc/blog/release/version-0-7-10-unstable.md index 9ecfb01f173..7fe8a4244d9 100644 --- a/doc/blog/release/version-0-7-10-unstable.md +++ b/doc/blog/release/version-0-7-10-unstable.md @@ -44,7 +44,7 @@ on the API before it is locked down for stability. </li> <li><p>windows/msi: add start menu links when installing (Jeroen Janssen)</p> </li> -<li><p>windows: don't install x64 version into the 'program files (x86)' folder (Matt Gollob)</p> +<li><p>windows: don't install x64 version into the 'program files (x86)' folder (Matt Gollob)</p> </li> <li><p>domain: Fix #3379 domain.intercept no longer passes error arg to cb (Marc Harter)</p> </li> diff --git a/doc/blog/release/version-0-7-11-unstable.md b/doc/blog/release/version-0-7-11-unstable.md index 28c2f6813c4..8e53732893a 100644 --- a/doc/blog/release/version-0-7-11-unstable.md +++ b/doc/blog/release/version-0-7-11-unstable.md @@ -28,7 +28,7 @@ on the github issue tracker. </li> <li><p>Fix #3425: removeAllListeners should delete array (Reid Burke)</p> </li> -<li><p>cluster: don't silently drop messages when the write queue gets big (Bert Belder)</p> +<li><p>cluster: don't silently drop messages when the write queue gets big (Bert Belder)</p> </li> <li><p>Add Buffer.concat method (isaacs)</p> </li> @@ -40,7 +40,7 @@ on the github issue tracker. </li> <li><p>Windows: Enable ETW events on Windows for existing DTrace probes. (Igor Zinkovsky)</p> </li> -<li><p>test: bundle node-weak in test/gc so that it doesn't need to be downloaded (Nathan Rajlich)</p> +<li><p>test: bundle node-weak in test/gc so that it doesn't need to be downloaded (Nathan Rajlich)</p> </li> <li><p>Make many tests pass on Windows (Bert Belder)</p> </li> diff --git a/doc/blog/release/version-0-7-12.md b/doc/blog/release/version-0-7-12.md index c9c448de6a3..15514fa5c76 100644 --- a/doc/blog/release/version-0-7-12.md +++ b/doc/blog/release/version-0-7-12.md @@ -13,7 +13,7 @@ slug: version-0-7-12 <p>Please try out this release. There will be very virtually no changes between this and the v0.8.x release family. This is the last chance to comment before it is locked down for stability. The API is effectively frozen now. </p> <p>This version adds backwards-compatible shims for binary addons that use libeio and libev directly. If you find that binary modules that could compile on v0.6 can not compile on this version, please let us know. Note that libev is officially deprecated in v0.8, and will be removed in v0.9. You should be porting your modules to use libuv as soon as possible. </p> <p>V8 is on 3.11.10 currently, and will remain on the V8 3.11.x branch for the duration of Node v0.8.x. </p> -<ul> <li><p>npm: Upgrade to 1.1.30<br> - Improved 'npm init'<br> - Fix the 'cb never called' error from 'oudated' and 'update'<br> - Add --save-bundle|-B config<br> - Fix isaacs/npm#2465: Make npm script and windows shims cygwin-aware<br> - Fix isaacs/npm#2452 Use --save(-dev|-optional) in npm rm<br> - <code>logstream</code> option to replace removed <code>logfd</code> (Rod Vagg)<br> - Read default descriptions from README.md files </p> +<ul> <li><p>npm: Upgrade to 1.1.30<br> - Improved 'npm init'<br> - Fix the 'cb never called' error from 'oudated' and 'update'<br> - Add --save-bundle|-B config<br> - Fix isaacs/npm#2465: Make npm script and windows shims cygwin-aware<br> - Fix isaacs/npm#2452 Use --save(-dev|-optional) in npm rm<br> - <code>logstream</code> option to replace removed <code>logfd</code> (Rod Vagg)<br> - Read default descriptions from README.md files </p> </li> <li><p>Shims to support deprecated <code>ev_*</code> and <code>eio_*</code> methods (Ben Noordhuis)</p> </li> <li><p>#3118 net.Socket: Delay pause/resume until after connect (isaacs)</p> </li> <li><p>#3465 Add ./configure --no-ifaddrs flag (isaacs)</p> diff --git a/doc/blog/release/version-0-7-5-unstable.md b/doc/blog/release/version-0-7-5-unstable.md index b493cde895b..88bd7077886 100644 --- a/doc/blog/release/version-0-7-5-unstable.md +++ b/doc/blog/release/version-0-7-5-unstable.md @@ -40,7 +40,7 @@ slug: version-0-7-5-unstable </li> <li><p>build: Make a fat binary for the OS X <code>make pkg</code>. (Nathan Rajlich)</p> </li> -<li><p>jslint src/ and lib/ on 'make test' (isaacs)</p> +<li><p>jslint src/ and lib/ on 'make test' (isaacs)</p> </li> </ul> <p>Source Code: <a href="http://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz">http://nodejs.org/dist/v0.7.5/node-v0.7.5.tar.gz</a> diff --git a/doc/blog/release/version-0-7-6-unstable.md b/doc/blog/release/version-0-7-6-unstable.md index 342c792a0a1..1bac491e647 100644 --- a/doc/blog/release/version-0-7-6-unstable.md +++ b/doc/blog/release/version-0-7-6-unstable.md @@ -21,11 +21,11 @@ slug: version-0-7-6-unstable - Handle cases where an optionalDependency fails to build<br> </p> </li> -<li><p>events: newListener emit correct fn when using 'once' (Roly Fentanes)</p> +<li><p>events: newListener emit correct fn when using 'once' (Roly Fentanes)</p> </li> <li><p>url: Ignore empty port component (Łukasz Walukiewicz)</p> </li> -<li><p>module: replace 'children' array (isaacs)</p> +<li><p>module: replace 'children' array (isaacs)</p> </li> <li><p>tls: parse multiple values of a key in ssl certificate (Sambasiva Suda)</p> </li> diff --git a/doc/blog/release/version-0-7-7-unstable.md b/doc/blog/release/version-0-7-7-unstable.md index 4ba17658a3d..1336096e464 100644 --- a/doc/blog/release/version-0-7-7-unstable.md +++ b/doc/blog/release/version-0-7-7-unstable.md @@ -28,7 +28,7 @@ slug: version-0-7-7-unstable </li> <li><p>cluster: add graceful disconnect support (Andreas Madsen)</p> </li> -<li><p>child_process: Separate 'close' event from 'exit' (Charlie McConnell)</p> +<li><p>child_process: Separate 'close' event from 'exit' (Charlie McConnell)</p> </li> <li><p>typed arrays: add Uint8ClampedArray (Mikael Bourges-Sevenier)</p> </li> @@ -38,11 +38,11 @@ slug: version-0-7-7-unstable </li> <li><p>Expose http parse error codes (Felix Geisendörfer)</p> </li> -<li><p>events: don't delete the listeners array (Ben Noordhuis, Nathan Rajlich)</p> +<li><p>events: don't delete the listeners array (Ben Noordhuis, Nathan Rajlich)</p> </li> -<li><p>process: add process.config to view node's ./configure settings (Nathan Rajlich)</p> +<li><p>process: add process.config to view node's ./configure settings (Nathan Rajlich)</p> </li> -<li><p>process: process.execArgv to see node's arguments (Micheil Smith)</p> +<li><p>process: process.execArgv to see node's arguments (Micheil Smith)</p> </li> <li><p>process: fix process.title setter (Ben Noordhuis)</p> </li> diff --git a/doc/blog/release/version-0-7-8-unstable.md b/doc/blog/release/version-0-7-8-unstable.md index 9c829fa6ad9..8dfac6fc751 100644 --- a/doc/blog/release/version-0-7-8-unstable.md +++ b/doc/blog/release/version-0-7-8-unstable.md @@ -30,11 +30,11 @@ slug: version-0-7-8-unstable </li> <li><p>typed arrays: unexport SizeOfArrayElementForType() (Aaron Jacobs)</p> </li> -<li><p>net: honor 'enable' flag in .setNoDelay() (Ben Noordhuis)</p> +<li><p>net: honor 'enable' flag in .setNoDelay() (Ben Noordhuis)</p> </li> <li><p>child_process: emit error when .kill fails (Andreas Madsen)</p> </li> -<li><p>gyp: fix 'argument list too long' build error (Ben Noordhuis)</p> +<li><p>gyp: fix 'argument list too long' build error (Ben Noordhuis)</p> </li> <li><p>fs.WriteStream: Handle modifications to fs.open (isaacs)</p> </li> diff --git a/doc/blog/vulnerability/http-server-security-vulnerability-please-upgrade-to-0-6-17.md b/doc/blog/vulnerability/http-server-security-vulnerability-please-upgrade-to-0-6-17.md index 5b29c26acfc..b64858d09cc 100644 --- a/doc/blog/vulnerability/http-server-security-vulnerability-please-upgrade-to-0-6-17.md +++ b/doc/blog/vulnerability/http-server-security-vulnerability-please-upgrade-to-0-6-17.md @@ -13,9 +13,9 @@ slug: http-server-security-vulnerability-please-upgrade-to-0-6-17 <h2>Details</h2> -<p>A few weeks ago, Matthew Daley found a security vulnerability in Node's HTTP implementation, and thankfully did the responsible thing and reported it to us via email. He explained it quite well, so I'll quote him here:</p> +<p>A few weeks ago, Matthew Daley found a security vulnerability in Node's HTTP implementation, and thankfully did the responsible thing and reported it to us via email. He explained it quite well, so I'll quote him here:</p> <blockquote> -<p>There is a vulnerability in node's `http_parser` binding which allows information disclosure to a remote attacker: +<p>There is a vulnerability in node's `http_parser` binding which allows information disclosure to a remote attacker: </p> <p>In node::StringPtr::Update, an attempt is made at an optimization on certain inputs (`node_http_parser.cc`, line 151). The intent is that if the current string pointer plus the current string size is equal to the incoming string pointer, the current string size is just increased to match, as the incoming string lies just beyond the current string pointer. However, the check to see whether or not this can be done is incorrect; "size" is used whereas "size_" should be used. Therefore, an attacker can call Update with a string of certain length and cause the current string to have other data appended to it. In the case of HTTP being parsed out of incoming socket data, this can be incoming data from other sockets. @@ -41,5 +41,5 @@ X header: </blockquote> <p>The fix landed on <a href="https://github.com/joyent/node/commit/7b3fb22">7b3fb22</a> and <a href="https://github.com/joyent/node/commit/c9a231d">c9a231d</a>, for master and v0.6, respectively. The innocuous commit message does not give away the security implications, precisely because we wanted to get a fix out before making a big deal about it. </p> <p>The first releases with the fix are v0.7.8 and 0.6.17. So now is a good time to make a big deal about it. </p> -<p>If you are using node version 0.6 in production, please upgrade to at least <a href="http://blog.nodejs.org/2012/05/04/version-0-6-17-stable/">v0.6.17</a>, or at least apply the fix in <a href="https://github.com/joyent/node/commit/c9a231d">c9a231d</a> to your system. (Version 0.6.17 also fixes some other important bugs, and is without doubt the most stable release of Node 0.6 to date, so it's a good idea to upgrade anyway.) </p> -<p>I'm extremely grateful that Matthew took the time to report the problem to us with such an elegant explanation, and in such a way that we had a reasonable amount of time to fix the issue before making it public. </p> +<p>If you are using node version 0.6 in production, please upgrade to at least <a href="http://blog.nodejs.org/2012/05/04/version-0-6-17-stable/">v0.6.17</a>, or at least apply the fix in <a href="https://github.com/joyent/node/commit/c9a231d">c9a231d</a> to your system. (Version 0.6.17 also fixes some other important bugs, and is without doubt the most stable release of Node 0.6 to date, so it's a good idea to upgrade anyway.) </p> +<p>I'm extremely grateful that Matthew took the time to report the problem to us with such an elegant explanation, and in such a way that we had a reasonable amount of time to fix the issue before making it public. </p> |