Software Público Brasileiro

CPAINT changelog

//---- v2.0.3 (Released Feburary 8, 2006) --------------------------
- PHP: nixed potential security hole with invalid response types
  (Thanks to James Bercegay)

//---- v2.0.2 (Released January 20, 2006) --------------------------
- JS: check HTTP response code and throw an error if request was 
  not accepted by server. (thanks gloomyandy)
- JS: allowing the underscore in node names.
- JS: added support for the passing of arrays and objects to the 
  backend.
- JS: added X-Powered-By request header.
- JS: node names, attribute names and -values from backend are now
  expected to be valid ISO-8859-1.
- JS: fixed wrong initialization of the data property to int zero in
  class cpaint_result_object.
- JS: removed unneccessary setter() methods from internal classes
  to reduce size.
- JS: added debugging level cp.set_debug(-1) to suppress errors.
- JS: fixed type conversion issue where non-empty, pure whitespace
  strings where interpreted as numbers.
- JS: fixed problem with callback being called twice.
	(thanks to Lance Rushing)
- JS: fixed problem with URLs with existing GET parameters.
	(thanks to Nelson Antunes)
- JS / PHP: added support for JSON as response type.
- JS / PHP: added support for E4X as response type.
- PHP: added cpaint::unregister()
- PHP: added cpaint::get_response_type();
- PHP: removed a bug in JSON library that prevented the generation of valid JSON
  when including a leading zero character.
- PHP: Removed unneccessary unescaping of parameters in proxy script.
- PHP: added support for array and object parameters from JavaScript (JSON!).
- PHP: added X-Powered-By response header.
- PHP: removed encoding of node names, attribute names and attribute 
  values to UTF-8 if possible. those values must now be valid 
  ISO-8859-1.
- PHP: removed output buffer to make it possible to include backend 
  and frontend in the same file.
- PHP: fixed error output (a function was called...) when no 
  parameters where sent to CPAINT indicating a function call, thus
  making it possible to include backend and frontend in the same file
  (thanks S. Alexandre M. Lemaire)
- PHP: added backend debugger code to main source tree & documentation.
- PHP: secured proxy utility (see documentation).
- PHP: added backend configuration file (for proxy security and future use)
- ASP: removed from distribution to focus on PHP and other ports.
  
//---- v2.0.1 (Released September 5, 2005) --------------------------
- JS: added the returning of plain-text response when using XML|OBJECT
  response type as second parameter to user-defined callback function
  (thanks Gunther)
- JS: added cpaint.capable property to determine AJAX-compatible 
  browsers
- JS: cleaned up CPAINT parameters when not using CPAINT API w/ proxy
- PHP: fixed callability of object methods (thanks Markus Wolf)
- PHP: fixed HTTP authentication in proxy file
- ASP: improved security regarding incoming function arguments

//---- v2.0 (Released August 20, 2005) ------------------------------
- completely rewrote the JavaScript frontend.
  - 100% OOP approach.
  - completely configurable through setter methods.
  - support for syncronized calls (SJAX?) ;-).
  - automatic XML parsing into JavaScript document structure if 
    response_type='object'.
  - support for arbitrary character sets, including non-printable 
    characters.
  - automatic detection and conversion of numeric data into 
    integers / floats.
  - unified use of call() for local and remote targets.
  - can now use frontend to retrieve static files or backend 
    functions not implemented with CPAINT
  - use of a single (persistent) connection for multiple calls.
  - XML to JavaScript parser is able to parse any XML structure now.
  - support for XML attributes.
  - added find_item_by_type() to cpaint_result_object.
  - added get_attribute(), set_attribute() to cpaint_result_object.
  - improved debugging, added debuglevels 1, 2. see set_debug()

- completely rewrote the PHP and ASP backends.
  - 100% OOP approach.
  - protection against remote code-execution.
  - support for object methods as callable functions.
  - nested XML support through composite pattern.
  - arbitrary XML structure creation support.
  - support for arbitrary character sets.
  - replaced remote code-execution blacklisting approach of v1.3-SP 
    with whitelisting through cpaint.register().
  - changed XML name convention. Attributes and tagnames are send 
    as-is, not in uppercase.

- improved readability of the ASP and PHP proxy utilities.
  - fixed GET requests.
  - proxy now uses attributenames identical to the CPAINT backend 
    itself whenever possible.
  - added support for target ports other than 80.
  - added support for Basic Authentication.
  - completely redesigned and rewritten documentation!

//---- v1.3-SP2 (Released August 16, 2005) --------------------------
- improved the remote-code execution fix.

//---- v1.3-SP (Released August 15, 2005) ---------------------------
- fixed a remote code-execution vulnerability on the backend by 
  adding a blacklist test on the function name passed by the 
  frontend.

//---- v1.3 (Released July 10, 2005) --------------------------------
- rewrote cpaint_parse_ajax_xml() to be able to parse arbitrary XML.
- added bugfix from v1.01 to cpaint_get_remote_file() as well.

//---- v1.2 (Released June 20, 2005) --------------------------------
- added method cpaint_parse_ajax_xml() to the JavaScript frontend for 
  primitive XML to JavaScript transformation of response data.

//---- v1.01 (Released June 16, 2005) -------------------------------
- bugfix regarding Unicode character encoding in cpaint_call().

//---- v1.0 (Released June 13, 2005) --------------------------------
- added support for XML/DOM document object returns.
- added support for XML on the backend.
- added proxy files for accessing remote functions & data.
- greatly improved documentation & examples.
- code stablized
- development effort moved to SourceForge.Net

//---- Pre-1.0 Releases and Dates -----------------------------------
- v0.7 - released June 8, 2005
- v0.5 & 0.6 - released June 6, 2005
- v0.4 - released June 3, 2005
- v0.2 & 0.3 - released June 2, 2005
- v0.1 - released May 31, 2005 (first release)