git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@966869 13f79535-47bb-0310-9956-ffa450edef68

If a specially crafted request was sent, it is possible to crash mod_dav, 
mod_cache or mod_session, as they accessed a field that is set to NULL
by the URI parser, assuming that it always put in a valid string.

PR: 49246
Submitted by: Mark Drayton
Patch by: Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@966348 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@966160 13f79535-47bb-0310-9956-ffa450edef68

PR 49474


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@965824 13f79535-47bb-0310-9956-ffa450edef68

PR 42995


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@965709 13f79535-47bb-0310-9956-ffa450edef68

PR 43906


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@965679 13f79535-47bb-0310-9956-ffa450edef68

PR 49616
diagnosed by Andrey Chernov


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@965582 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@964173 13f79535-47bb-0310-9956-ffa450edef68

for additional auth types. This makes ap_note_auth_failure() work with
mod_auth_digest again.

PR: 48807


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960399 13f79535-47bb-0310-9956-ffa450edef68

It's no longer needed, since mod_rewrite now uses
our usual error log. The superfluous EOL was logged
as '\n'.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960236 13f79535-47bb-0310-9956-ffa450edef68

explicitely giving a value.

Most modules only check presence of a variable, not the
value, so it makes sense to make the VAL argument in
the mod_rewrite ENV flag optional.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@960233 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@957235 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956966 13f79535-47bb-0310-9956-ffa450edef68

from CHANGES and docs.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956524 13f79535-47bb-0310-9956-ffa450edef68

Note ap_note_auth_failure() breakage in STATUS


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956387 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956228 13f79535-47bb-0310-9956-ffa450edef68

  the available libs.
- Remove redundant --with-distcache option. Simply enable distcache if
  mod_socache_dc is selected.
- Enable serf support by default if serf is available in /usr.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@956221 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@955894 13f79535-47bb-0310-9956-ffa450edef68

Comment character needs to be in column 1.

Submitted by: Gregg L Smith <lists glewis com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@955888 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954991 13f79535-47bb-0310-9956-ffa450edef68

release


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954980 13f79535-47bb-0310-9956-ffa450edef68

Likely we still have to clean CHANGES from things backported
to 2.2.x.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@954862 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@953682 13f79535-47bb-0310-9956-ffa450edef68

init functions for connection filters (doing an "init" once per
handler invocation makes no sense for a connection filter).  No longer 
run init functions multiple times per request if a subrequest is used.

* include/util_filter.h (ap_filter_rec_t): Clarify use of the init
  function pointer.

* server/config.c (invoke_filter_init): Drop ap_ prefix for private
  function; take a request_rec pointer and only invoke filters with
  matching request.
  (ap_invoke_handler): Adjust accordingly.

PR: 49328
Reviewed by: rpluem


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@953311 13f79535-47bb-0310-9956-ffa450edef68

  subrequest, preserve any filters in the output filter chain which
  were not specific to the subrequest across the redirect (where
  f->r does not point to the subreq's request_rec).

PR: 17629




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952828 13f79535-47bb-0310-9956-ffa450edef68

Response if they so choose to do so. Previously an attempt to cache a 206
was arbitrarily allowed if the response contained an Expires or
Cache-Control header, and arbitrarily denied if both headers were missing.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952823 13f79535-47bb-0310-9956-ffa450edef68

additions and ap_recent_ctime_ex().

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952222 13f79535-47bb-0310-9956-ffa450edef68

- Building modules as DSOs and the "most" module set by default.
  r952007, r952008, r952009
- Fixing VPATH build when using included APR.
  r951769, r951769
- Fixing mod_session_crypto build for APR 2 and VPATH
  r951766
- Fixing mod_session_crypto API incompatibility with APR 2
  r951870

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@952143 13f79535-47bb-0310-9956-ffa450edef68

PR: 49383
Submitted by: Pavel Kankovsky <peak argo troja mff cuni cz>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951932 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951905 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951393 13f79535-47bb-0310-9956-ffa450edef68

cache was not in the merged config.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951235 13f79535-47bb-0310-9956-ffa450edef68

a 206 Partial Content. This stops a reverse proxied partial response
from becoming cached, and then being served in subsequent responses.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@951222 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950761 13f79535-47bb-0310-9956-ffa450edef68

are determined.
PR 49369 - Matthew Steele


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950302 13f79535-47bb-0310-9956-ffa450edef68

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950250 13f79535-47bb-0310-9956-ffa450edef68

can use the credentials from the authentication phase
(AuthLDAPSearchAsUSer,AuthLDAPCompareAsUser).
PR 48340 

Submitted by: Domenico Rotiroti, Eric Covener
Reviewed by: Eric Covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@950248 13f79535-47bb-0310-9956-ffa450edef68

transformation of the basic auth username.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949436 13f79535-47bb-0310-9956-ffa450edef68

AuthLDAPAuthorizePrefix can be used to force this to overlap with the prefix used
for authentication.

PR 45584


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@949336 13f79535-47bb-0310-9956-ffa450edef68

PR: 45343
Submitted by: Bill Cole <apachebugz-20090909 billmail.scconsult.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@944383 13f79535-47bb-0310-9956-ffa450edef68