Add minor version bump to 1.6.11

JSON parsing function deprecations warrant a minor version bump.
This commit is contained in:
Evan Rutledge Borden 2019-01-29 15:31:35 -06:00
parent b50ca99566
commit da9e72b82f
3 changed files with 9 additions and 1 deletions

View File

@ -1,5 +1,9 @@
# ChangeLog for yesod-core
## 1.6.11
* Deprecate insecure JSON parsing functions [#1576](https://github.com/yesodweb/yesod/pull/1576)
## 1.6.10.1
* Fix test suite compilation for [commercialhaskell/stackage#4319](https://github.com/commercialhaskell/stackage/issues/4319)

View File

@ -106,6 +106,8 @@ parseJsonBody = parseInsecureJsonBody
-- indicates JSON content.
--
-- Note: This function is vulnerable to CSRF attacks.
--
-- @since 1.6.11
parseInsecureJsonBody :: (MonadHandler m, J.FromJSON a) => m (J.Result a)
parseInsecureJsonBody = do
eValue <- runConduit $ rawRequestBody .| runCatchC (sinkParser JP.value')
@ -150,6 +152,8 @@ requireJsonBody = requireInsecureJsonBody
-- | Same as 'parseInsecureJsonBody', but return an invalid args response on a parse
-- error.
--
-- @since 1.6.11
requireInsecureJsonBody :: (MonadHandler m, J.FromJSON a) => m a
requireInsecureJsonBody = do
ra <- parseInsecureJsonBody

View File

@ -1,5 +1,5 @@
name: yesod-core
version: 1.6.10.1
version: 1.6.11
license: MIT
license-file: LICENSE
author: Michael Snoyman <michael@snoyman.com>