Update to 3.49:

Version 3.49

  [BUG FIXES]
  1. Fix a regression since 3.44 involving a case when the header includes "Content-Length: 0".
    Thanks to Alex Vandiver (RT#51109)
  2. Suppress uninitialized warnings under -w. Thanks to burak.  (RT#50301)
  3. url() now uses virtual_port() instead of server_port(). Thanks to MKANAT and Yanick Champoux. (RT#51562)

  [SECURITY]
  1. embedded newlines are now filtered out of header values in header().
    Thanks to Mark Stosberg and Yanick Champoux.

  [DOCUMENTATION]
  1. README was updated to reflect that CGI.pm was moved under ./lib.
    Thanks to Alex Vandiver.

  [INTERNALS]
  1. More tests were added for autoescape, thanks to Bob Kuo. (RT#25485)
  2. Attempt to avoid test failures with t/fast, thanks to Steve Hay. (RT#49599)

(wiz)