git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966476 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966352 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966350 13f79535-47bb-0310-9956-ffa450edef68

If a specially crafted request was sent, it is possible to crash mod_dav or 
mod_cache, as they accessed a field that is set to NULL by the URI parser, 
assuming that it always put in a valid string.

PR: 49246
Submitted by: Mark Drayton
Patch by: Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966349 13f79535-47bb-0310-9956-ffa450edef68

init functions for connection filters (doing an "init" once per
handler invocation makes no sense for a connection filter).  No longer 
run init functions multiple times per request if a subrequest is used.

* include/util_filter.h (ap_filter_rec_t): Clarify use of the init
  function pointer.

* server/config.c (invoke_filter_init): Drop ap_ prefix for private
  function; take a request_rec pointer and only invoke filters with
  matching request.
  (ap_invoke_handler): Adjust accordingly.

PR: 49328
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966340 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966338 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966140 13f79535-47bb-0310-9956-ffa450edef68

This one-line patch fixes a bug introduced since 2.2.15,
so it would be a particularly good idea to backport before $next-release.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966060 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@966058 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@965967 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@965852 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@965833 13f79535-47bb-0310-9956-ffa450edef68

I kept "back slash" when explicitely used in
comparison with "forward slash".

Backport of r965792 from trunk.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@965799 13f79535-47bb-0310-9956-ffa450edef68

Thanks to Denis Howe for the hint.

PR49620.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@965798 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@965710 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@965699 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@964779 13f79535-47bb-0310-9956-ffa450edef68

mod_rewrite: Allow to set environment variables without
explicitely giving a value.

Before this patch using [ENV=VAR] instead of [ENV=VAR:VAL]
silently drops the flag (it is added to the list of vars to set,
but then never actually set).

Submitted by: rjung
Reviewed by: rjung, niq, rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@964741 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@964547 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963438 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963436 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963434 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963433 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963431 13f79535-47bb-0310-9956-ffa450edef68

      builds of mod_ssl to use 'SSLFIPS off' for portability, but the proper
          build of openssl is required for 'SSLFIPS on'.  
              PR: 46270  [Dr Stephen Henson <steve openssl.org>, William Rowe]
                  Trunk patch: http://svn.apache.org/viewvc?rev=925980&view=rev
                                   http://svn.apache.org/viewvc?rev=926000&view=rev
                                                    http://svn.apache.org/viewvc?rev=926614&view=rev
                                                                     http://svn.apache.org/viewvc?rev=926619&view=rev
                                                                         2.2.x patch: http://people.apache.org/~wrowe/ssl-fips-2.2.patch
                                                                             +1: wrowe
                                                                                 minfrin: Doesn't build on v2.2 until you add r926614. With r926614, +1.
                                                                                     wrowe: Added both of rpluem's proposed patched, 926614 and 926619
                                                                                         +1: drh, rjung, jim
                                                                                             rjung: We should add a note about the first version providing this
                                                                                                        option in the docs page, like e.g. we did for SSLInsecureRenegotiation.
                                                                                                            wrowe asks; you mean <Compatibility> tag?  Yes, of course.




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963430 13f79535-47bb-0310-9956-ffa450edef68

      httpd's writing of a pid file) so that it becomes possible to run
          more than one instance of htcacheclean on the same machine.
              Trunk patch: http://svn.apache.org/viewvc?rev=910705&view=rev
                               http://svn.apache.org/viewvc?rev=910735&view=rev
                                                http://svn.apache.org/viewvc?rev=910756&view=rev
                                                                 http://svn.apache.org/viewvc?rev=917002&view=rev
                                                                                  http://svn.apache.org/viewvc?rev=917005&view=rev
                                                                                      2.2.x patch: http://people.apache.org/~minfrin/htcacheclean-pid.patch
                                                                                          +1: minfrin, sf, trawick, jim




git-svn-id: https://svn.apach...

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963426 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963424 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963260 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963233 13f79535-47bb-0310-9956-ffa450edef68

Fix bug in r785425 (dereference null pointer when not configured)
and add a couple of comments.

Submitted by: niq
Reviewed by: rpluem, niq, rjung


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963220 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963219 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963205 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963200 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963196 13f79535-47bb-0310-9956-ffa450edef68

* Ensure that we only return a non fatal error if the request is idempotent
  and if we did not sent any request body so far.

Submitted by: rpluem
Reviewed by: rpluem, trawick, niq


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963195 13f79535-47bb-0310-9956-ffa450edef68

  the compiler to fail.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963194 13f79535-47bb-0310-9956-ffa450edef68

  *) mod_ldap: LDAP caching was suppressed (and ldap-status handler returns
     title page only) when any mod_ldap directives were used in VirtualHost
     context.  [Eric Covener]

Reviewed By: covener, wrowe, trawick



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@963086 13f79535-47bb-0310-9956-ffa450edef68

website is reverse proxied two or more times into the frontend URL space.
PR: 48947
minfrin's patch


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@962992 13f79535-47bb-0310-9956-ffa450edef68

PR 38322


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@962991 13f79535-47bb-0310-9956-ffa450edef68