Commits · 59b42e8cc7567e21942fdecbd0ebb0e8ec0e9d2f · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

21 Jul, 2003 1 commit

reject overlong credentials from the commandline · 59b42e8c

Andre Malo authored Jul 21, 2003

Acked by: Cliff Woolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100718 13f79535-47bb-0310-9956-ffa450edef68

59b42e8c

18 Jul, 2003 2 commits

Vote; note something missing in sections.html, and decrease the priority · ead9f6ce

Joshua Slive authored Jul 18, 2003

of the var/ issue.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100692 13f79535-47bb-0310-9956-ffa450edef68

ead9f6ce

when prefixing document root, use the core translator instead · 6e8e4ad7

Andre Malo authored Jul 18, 2003

of baking our own. The core function is much better maintained
and probably more safe.
Additionally this removes just another fixed buffer :)

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100681 13f79535-47bb-0310-9956-ffa450edef68

6e8e4ad7

17 Jul, 2003 4 commits

update transformation · 84400a06

Andre Malo authored Jul 17, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100680 13f79535-47bb-0310-9956-ffa450edef68

84400a06

step two: get a rid of the old do_expand function. · 4eb8921f

Andre Malo authored Jul 17, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100676 13f79535-47bb-0310-9956-ffa450edef68

4eb8921f

optimization; rewrite the do_expand function in order to: · 7f615307

Andre Malo authored Jul 17, 2003

  + give it a better interface
  + get a rid of most of the fixed stack buffers and then
  + no longer limit rewritten uris, expanded variables etc to
    2k
  + make it better readable and understandable at all.

This is a two-tiered commit for better diffs.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100675 13f79535-47bb-0310-9956-ffa450edef68

7f615307

Speed up ap_md5digest() a little. · 3e8eb8c7

Joe Orton authored Jul 17, 2003

* util_md5.c (ap_md5digest): Use a larger buffer; ensure size is a
multiple of 64 to prevent buffering in MD5 code.  Remove redundant
'length' variable.  Reset read size in case of short reads.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100672 13f79535-47bb-0310-9956-ffa450edef68

3e8eb8c7

16 Jul, 2003 9 commits

Oops. Replace * with *:80 in the <VirtualHost> example also. · bd947046
Richard Bowen authored Jul 16, 2003
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100657 13f79535-47bb-0310-9956-ffa450edef68
```
bd947046

Replace NameVirtualHost * with NameVirtualHost *:80 in the example · 33f0fb69

Richard Bowen authored Jul 16, 2003

config.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100654 13f79535-47bb-0310-9956-ffa450edef68

33f0fb69

add some linebreaks and reorder case alphabetically for better · 394f5224

Andre Malo authored Jul 16, 2003

readability. No code changes.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100652 13f79535-47bb-0310-9956-ffa450edef68

394f5224

optimization: no need to use the pool here. This is · 5c2292c9

Andre Malo authored Jul 16, 2003

obviously a static value.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100651 13f79535-47bb-0310-9956-ffa450edef68

5c2292c9

optimization: · e24a5526

Andre Malo authored Jul 16, 2003

- add comment about what subst_prefix_path function does
- reduce the use of fixed buffers
- get a rid of unnecessary memory operations


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100650 13f79535-47bb-0310-9956-ffa450edef68

e24a5526

· d8e3a94d

Paul J. Reder authored Jul 16, 2003

Just fixing some improperly formatted entries.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100649 13f79535-47bb-0310-9956-ffa450edef68

d8e3a94d

Switch ap_filter_flush() to ap_pass_brigade(). This removes a layer of · 93fa982d

Greg Stein authored Jul 16, 2003

function calls, provides type safety for the ap_filter_t*, and
clarifies what is really going on (i.e. we aren't sending a FLUSH
bucket of any kind).

* mod_dav.c (dav_send_multistatus, dav_method_propfind): change the
    ap_filter_flush call to ap_pass_brigade; flip the params to match
    the prototype.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100647 13f79535-47bb-0310-9956-ffa450edef68

93fa982d

* util_filter.h (ap_filter_flush): clarify that this function has · f2f0e0db

Greg Stein authored Jul 16, 2003

nothing to do with FLUSH buckets. It is simply a cover function
for ap_pass_brigade for use with the apr_brigade_* writing
functions.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100646 13f79535-47bb-0310-9956-ffa450edef68

f2f0e0db

optimization: speed up ruleflag parsing. · d9d0d799

Andre Malo authored Jul 16, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100645 13f79535-47bb-0310-9956-ffa450edef68

d9d0d799

15 Jul, 2003 9 commits

optimization: no need to search linear for headers. · dbaf6336

Andre Malo authored Jul 15, 2003

apr_table_get should be more efficient nearly always.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100644 13f79535-47bb-0310-9956-ffa450edef68

dbaf6336

optimization: rewrite reduce_uri function: · 4b823417

Andre Malo authored Jul 15, 2003

get a rid of static buffers and unnecessary memory operations


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100643 13f79535-47bb-0310-9956-ffa450edef68

4b823417

· 95855a2b

Paul J. Reder authored Jul 15, 2003

Update the header token parsing code to allow LWS between the
token word and the ':' seperator.  [PR 16520]
[submitted: Kris Verbeeck <kris.verbeeck@advalvas.be> and
            Nicel KM <mnicel@yahoo.com>]
[Reviewed: <coad@measurement-factory.com> and
           Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100642 13f79535-47bb-0310-9956-ffa450edef68

95855a2b

· 3481be6d

Paul J. Reder authored Jul 15, 2003

Eliminate creation of a temporary table in ap_get_mime_headers_core()
Submitted by:   Joe Schaefer <joe+gmane@sunstarsys.com>
Reviewed by:    Brian Pane
Backported by:  Paul J. Reder


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100638 13f79535-47bb-0310-9956-ffa450edef68

3481be6d

minor optimization. No need to use a function overhead here. · ee611704

Andre Malo authored Jul 15, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100637 13f79535-47bb-0310-9956-ffa450edef68

ee611704

· 85e448e8

Paul J. Reder authored Jul 15, 2003

Namespace protected the table label.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100634 13f79535-47bb-0310-9956-ffa450edef68

85e448e8

Ignore RewriteRules in .htaccess files if the directory · c6e61b1d

Andre Malo authored Jul 15, 2003

containing the .htaccess file is requested without a trailing slash.

PR: 20195

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100632 13f79535-47bb-0310-9956-ffa450edef68

c6e61b1d

If a directory contains a file listed in the · 3e2c6972

Andre Malo authored Jul 15, 2003

DirectoryIndex directive, the folder icon is no longer replaced
by the icon of that file.

PR:	9587
Submitted by:	David Shane Holden <dpejesh@yahoo.com>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100628 13f79535-47bb-0310-9956-ffa450edef68

3e2c6972

Reverse the URL change in previous commit. Also fix the name of link. · cd120378

Yoshiki Hayashi authored Jul 15, 2003

Thanks Andre for catching this.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100624 13f79535-47bb-0310-9956-ffa450edef68

cd120378

14 Jul, 2003 15 commits

strip trailing spaces of groupnames. · 0457c9d6

Andre Malo authored Jul 14, 2003

PR:	12863


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100620 13f79535-47bb-0310-9956-ffa450edef68

0457c9d6

· 872f17a0

Paul J. Reder authored Jul 14, 2003

Remove some extraneous code committed as part of the fix for 13946 pointed
out by Andre Malo. [Paul J. Reder]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100615 13f79535-47bb-0310-9956-ffa450edef68

872f17a0

mention the new capability for input filters · 12269e45

Jeff Trawick authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100610 13f79535-47bb-0310-9956-ffa450edef68

12269e45

remove my in-line comments · 29604831

Roy T. Fielding authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100607 13f79535-47bb-0310-9956-ffa450edef68

29604831

mod_ssl: Fix a problem setting variables that represent the · c97f0349

Jeff Trawick authored Jul 14, 2003

client certificate chain.

PR:  21371


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100605 13f79535-47bb-0310-9956-ffa450edef68

c97f0349

Remember an authenticated user during internal redirects if the · 4dc16beb

Andre Malo authored Jul 14, 2003

redirection target is not access protected and pass it
to scripts using the REDIRECT_REMOTE_USER environment variable.

PR: 10678, 11602.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100604 13f79535-47bb-0310-9956-ffa450edef68

4dc16beb

not valid to modify string pointed to by szCryptoDevice... it points to a · a97b9213

Jeff Trawick authored Jul 14, 2003

static string or something parsed from the config


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100603 13f79535-47bb-0310-9956-ffa450edef68

a97b9213

· a5aaa65c

Paul J. Reder authored Jul 14, 2003

Ooops, forgot the PR number for my recent mod_rewrite commit (PR #13946)...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100601 13f79535-47bb-0310-9956-ffa450edef68

a5aaa65c

· a6bf1186

Paul J. Reder authored Jul 14, 2003

mod_rewrite: fix a problem in the proxy support of mod_rewrite. The broken
code was inserting multiple "proxy:" fields in the rewritten URIs.
[Submitted by:  Eider Oliveira <eider@bol.com.br>]
[Updated and reviewed by: Paul J. Reder]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100600 13f79535-47bb-0310-9956-ffa450edef68

a6bf1186

document handler passing · b50138d7

Andre Malo authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100599 13f79535-47bb-0310-9956-ffa450edef68

b50138d7

Propagate the handler name to the action script via · 1a0f0edb

Andre Malo authored Jul 14, 2003

the REDIRECT_HANDLER environment variable.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100598 13f79535-47bb-0310-9956-ffa450edef68

1a0f0edb

mod_ext_filter: Set additional environment variables for use by · c805df98

Jeff Trawick authored Jul 14, 2003

the external filter.

PR:    20944

The missing code was identified by Andrew Ho, coded/tested by Jeff
Trawick, and verified yet again by Neil Fraser.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100595 13f79535-47bb-0310-9956-ffa450edef68

c805df98

no need to open error log for reading · 25f8ead4

Jeff Trawick authored Jul 14, 2003

Submitted by: Bjoern A. Zeeb
Reviewed by: Jeff Trawick, who added the same change to another path

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100594 13f79535-47bb-0310-9956-ffa450edef68

25f8ead4

When the top-level directory section for / was added for the sake · 532a5ff3

Roy T. Fielding authored Jul 14, 2003

of performance and to allow automount symlinks to be followed, we
mistakenly opened access to the entire directory system by default.
I noticed this because all of the /~user directories are available
by default without any restrictions, which is a bad idea for anything
other than one server within a department of shared users. However,
it also makes it easier to serve files anywhere on disk by mistake,
and makes other URI-handling bugs more severe than they would be
otherwise. Therefore, this patch reinstates access control to deny
access to all files other than under DocumentRoot, icons, and manual,
until additional directory/locations are explicitly allowed by the admin.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100593 13f79535-47bb-0310-9956-ffa450edef68

532a5ff3

oops... add missing <br />s · 377f74d8

Andre Malo authored Jul 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100592 13f79535-47bb-0310-9956-ffa450edef68

377f74d8