pear/http_request2

• Tested on PHP 8.4, psalm 6 used for static analysis;
• Prevent XSS if PHP files backing networked tests (those in tests/_network directory) are served from a publicly available website.

Added

• Tested on PHP 8.4;
• Psalm 6 used for static analysis;
• Updated Public Suffix List.

Fixed

• Prevent XSS when PHP files backing server-side tests are served from a publicly available website, thanks to Peter Potrowl (peter017 at gmail dot com) for the report.
• data/generate-list.php will only run with a command-line SAPI.
• Better random value used for cnonce parameter in Digest authentication, see [issue #30]. Digest authentication should be considered deprecated, however.
• psalm.xml configuration file is no longer installed by composer.

• Use psalm for static analysis, several minor issues fixed
• Correctly parse HTTP status line with an empty reason-phrase (see #26)
• Updated Public Suffix List

• Tested on PHP 8.2 and 8.3
• Use [psalm] for static analysis, several minor issues fixed
• Correctly parse HTTP status line with an empty reason-phrase (see [pull request #26])
• Updated Public Suffix List

• The package runs under PHP 8.1 without E_DEPRECATED messages (see [issue #25])
• Updated Public Suffix List

Fixed

• Socket adapter will now retry writing to socket rather than throw an exception if fwrite() call returns zero written bytes ([issue #23])

Changed

• Socket adapter will use only TLS 1.2 and TLS 1.3 (the latter is available on PHP 7.4+)
• Upgraded tests for PHPUnit 9 compatibility, [PHPUnit Polyfills package] is used to run them on PHP 5.6 to PHP 8
• Test suite now runs on Github Actions rather than on Travis
• Updated Public Suffix List

Fix Socket adapter prematurely stopping receiving the response body

Fixed

Socket adapter could prematurely end receiving the response body due to fread() call returning an empty string

Fixed

• Switch socket to blocking mode when enabling crypto, this fixes HTTPS requests through proxy with Socket adapter ([issue #20])
• Add .gitattributes file to omit installing tests ([issue #19])

• Minimum required version is now PHP 5.6, as using older versions for HTTPS requests may be insecure
• Removed support for magic_quotes_runtime, as get_magic_quotes_runtime() was deprecated in PHP 7.4 and the functionality itself was disabled since PHP 5.4 (PEAR bug #23839)
• Socket adapter now uses socket in non-blocking mode, as some configurations could have problems with timeouts in HTTPS requests (PEAR bug #21229)
• Fixed bogus size check error with gzipped responses larger than 4 GiB uncompressed (PEAR bug #21239)
• Use current "Intermediate compatibility" cipher list
• Updated Public Suffix List

The package is now 100% autoload-compatible, when installed with composer it no longer uses include-path and does not contain require_once statements

Release HTTP_Request2 2.2.1

Release HTTP_Request2 2.2.0