PR: 33466


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@561440 13f79535-47bb-0310-9956-ffa450edef68

mod_status: Fix a possible XSS attack against a site with a public
server-status page and ExtendedStatus enabled, for browsers which
perform charset "detection".  Reported by Stefan Esser.  [Joe Orton]

Joe's patch was tweaked ever so slightly by me, then reviewed
by Joe and Sander T.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@559142 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@553551 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@553239 13f79535-47bb-0310-9956-ffa450edef68

  remove it from our pid table in any case.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@544218 13f79535-47bb-0310-9956-ffa450edef68

that is, when we know it's gone.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@544149 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@544148 13f79535-47bb-0310-9956-ffa450edef68

what :) Also, in this section we later on unset as well,
but also encapsulate the logic here as well.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543663 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543634 13f79535-47bb-0310-9956-ffa450edef68

a check against the pid values located in the
scoreboard.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543511 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@543050 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@533996 13f79535-47bb-0310-9956-ffa450edef68

added new var XDCDATA and removed xdcdata setting from mis-used XLFLAGS;
moved some copyright from .opt to .def file since -copy option doesnt accept commas.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@531666 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@522952 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@495144 13f79535-47bb-0310-9956-ffa450edef68

	Tweak tense.
	Update Allow/Deny match table.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@479902 13f79535-47bb-0310-9956-ffa450edef68

	Add table showing results of match combinations.
	Fix some tenses.
	Fix case of CENTER & IP Address.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@479297 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@432760 13f79535-47bb-0310-9956-ffa450edef68

header if a user visits a site holding a malicious flash file.  
IMO this is a flash flaw, but mark as security for future reference, although
only for 1.3.  2.0 and 2.2 both need to timeout before any XSS happens 
reducing the risk.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@427039 13f79535-47bb-0310-9956-ffa450edef68

  Rebump after retag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426185 13f79535-47bb-0310-9956-ffa450edef68

  Revert, missed one change to APACHE_RELEASE bit


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426181 13f79535-47bb-0310-9956-ffa450edef68

  Bump after tag


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426170 13f79535-47bb-0310-9956-ffa450edef68

  Prepare to tag 1.3.37


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426166 13f79535-47bb-0310-9956-ffa450edef68

  Wrong project name


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426162 13f79535-47bb-0310-9956-ffa450edef68

mod_rewrite: Fix an off-by-one security problem in the ldap scheme
handling.  For some RewriteRules this could lead to a pointer being
written out of bounds.  Reported by Mark Dowd of McAfee.

Reviewed by: trawick, lars, jorton, wrowe, benl



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426146 13f79535-47bb-0310-9956-ffa450edef68

  Official home is http://svn.apache.org/repos/asf/httpd/httpd/dist/


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@426108 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@421184 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@421131 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@406324 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@406321 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@405423 13f79535-47bb-0310-9956-ffa450edef68

and allows us to re-add/fix the functionality "later on"


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@405142 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@398586 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396613 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396606 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396604 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396531 13f79535-47bb-0310-9956-ffa450edef68

  * Add a changelog entry for same

  * reorder the changelog to put security first.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@396294 13f79535-47bb-0310-9956-ffa450edef68

a universal policy and procedure... we cannot willy
nilly change the dates unless significant or
material changes are made.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395984 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@395929 13f79535-47bb-0310-9956-ffa450edef68