All Versions
35
Latest Version
Avg Release Cycle
100 days
Latest Release
740 days ago

Changelog History
Page 2

  • v6.0.0 Changes

    April 18, 2019

    ➕ Added

    • #blocklist and #safelist name argument (the first one) is now optional.
    • ➕ Added support to subscribe only to specific event types via ActiveSupport::Notifications, e.g. subscribe to the throttle.rack_attack or the blocklist.rack_attack event.

    🔄 Changed

    • 🔄 Changed ActiveSupport::Notifications event naming to comply with the recommended format.
    • 🔄 Changed ActiveSupport::Notifications event so that the 5th yielded argument to the #subscribe method is now a Hash instead of a Rack::Attack::Request, to comply with ActiveSupports spec. The original request object is still accessible, being the value of the hash's :request key.

    🗄 Deprecated

    • 👍 Subscriptions via ActiveSupport::Notifications to the "rack.attack" event will continue to work (receive event notifications), but it is going to be removed in a future version. Replace the event name with /rack_attack/ to continue to be subscribed to all events, or "throttle.rack_attack" e.g. for specific type of events only.

    ✂ Removed

    • ✂ Removed support for ruby 2.2.
    • ✂ Removed support for obsolete memcache-client as a cache store.
    • ✂ Removed deprecated methods #blacklist and #whitelist (use #blocklist and #safelist instead).

  • v5.4.2 Changes

    October 31, 2018

    🛠 Fixed

    • 🛠 Fix unexpected error when using redis 3 and any store which is not proxied

    🔄 Changed

    • 👻 Provide better information in MisconfiguredStoreError exception message to aid end-user debugging

  • v5.4.1 Changes

    September 29, 2018

    🛠 Fixed

  • v5.4.0 Changes

    July 02, 2018

    ➕ Added

    • 👌 Support "plain" Redis as a cache store backend (#280). Thanks @bfad and @ryandv.
    • When overwriting Rack::Attack.throttled_response you can now access the exact epoch integer that was used for caching
      so your custom code is less prone to race conditions (#282). Thanks @doliveirakn.

    Dependency changes

    • Explictly declare ancient rack 0.x series as incompatible in gemspec

  • v5.3.2 Changes

    June 25, 2018

    🛠 Fixed

  • v5.3.1 Changes

    June 21, 2018

    🛠 Fixed

  • v5.3.0 Changes

    June 19, 2018

    ➕ Added

  • v5.2.0 Changes

    March 29, 2018

    ➕ Added

    • Shorthand for blocking an IP address Rack::Attack.blocklist_ip("1.2.3.4") (#320)
    • Shorthand for blocking an IP subnet Rack::Attack.blocklist_ip("1.2.0.0/16") (#320)
    • Shorthand for safelisting an IP address Rack::Attack.safelist_ip("5.6.7.8") (#320)
    • Shorthand for safelisting an IP subnet Rack::Attack.safelist_ip("5.6.0.0/16") (#320)
    • Throw helpful error message when using allow2ban but cache store is misconfigured (#315)
    • Throw helpful error message when using fail2ban but cache store is misconfigured (#315)

  • v5.1.0 Changes

    March 10, 2018
    • Fixes edge case bug when using ruby 2.5.0 and redis #253 (#271)
    • Throws errors with better semantics when missing or misconfigured store caches to aid in developers debugging their configs (#274)
    • Removed legacy code that was originally intended for Rails 3 apps (#264)

  • v5.0.1 Changes

    August 11, 2016
    • Fixes arguments passed to deprecated internal methods. (#198)