Skip to content

Upgrading Werkzeug 0.11 to 0.12

Review needed0.11.15 → 0.12.2Security2Deprecated1New9Changed7Fixed13

Full comparisonBack to Werkzeug
Review neededUpgrade verdict

1 deprecation and 2 security fixes.

In plain terms
  • The built-in development server now uses stronger default cryptography.
  • Closes a way to trick yourself into running malicious code in the interactive debugger console.
  • The werkzeug.script module now emits prominent deprecation warnings.
Must act 3 items need code or config changes

What you must change

Security2
Uses modern cryptographic defaults in the dev servers.
0.12CHANGES.rstSummarizedView source
Fixes self-XSS in the debugger console.
0.12CHANGES.rstSummarizedView source

Deprecations to plan for

Deprecated1
Spit out big deprecation warnings for werkzeug.script
werkzeug.script
0.12CHANGES.rstSummarizedView source

API changes

Generated by DepDelta from published Python source. Not mixed with prose notes.

  • added: class UWSGICache(BaseCache)
  • added: constructor UWSGICache(default_timeout=…, cache=…)
  • added: method UWSGICache.add(key, value, timeout=…)
  • added: method UWSGICache.clear()
  • added: method UWSGICache.delete(key)
  • added: method UWSGICache.get(key)
  • added: method UWSGICache.has(key)
  • added: method UWSGICache.set(key, value, timeout=…)
  • changed: class ETags(object) → class ETags(Container, Iterable)
  • changed: class HeaderSet(object) → class HeaderSet(MutableSet)
  • added: class ViewItems(object)
  • added: constructor ViewItems(multi_dict, method, repr_name, *a, **kw)
  • added: method Range.to_content_range_header(length)
  • changed: function is_resource_modified(environ, etag=…, data=…, last_modified=…) → function is_resource_modified(environ, etag=…, data=…, last_modified=…, ignore_if_range=…)
  • changed: method Rule.match(path) → method Rule.match(path, method=…)
  • added: property BuildError.suggested
  • changed: function safe_join(directory, filename) → function safe_join(directory, *pathnames)
  • added: field ThreadedWSGIServer.daemon_threads
  • added: variable termcolor
  • changed: method ETagResponseMixin.make_conditional(request_or_environ) → method ETagResponseMixin.make_conditional(request_or_environ, accept_ranges=…, complete_length=…)
  • added: method FileWrapper.seek(*args)
  • added: method FileWrapper.seekable()
  • added: method FileWrapper.tell()