Skip to content
GitLab
  1. 30 Oct, 2016 1 commit
  3. 29 Oct, 2016 1 commit
  5. 28 Oct, 2016 1 commit
  7. 27 Oct, 2016 2 commits
  9. 26 Oct, 2016 1 commit
  11. 24 Oct, 2016 1 commit
  13. 23 Oct, 2016 5 commits
  15. 22 Oct, 2016 2 commits
  17. 21 Oct, 2016 8 commits
  19. 20 Oct, 2016 2 commits
  21. 18 Oct, 2016 3 commits
  23. 17 Oct, 2016 3 commits
  25. 16 Oct, 2016 3 commits
  27. 15 Oct, 2016 6 commits
  29. 14 Oct, 2016 1 commit
    • William A. Rowe Jr's avatar
      · 7454dbad
      William A. Rowe Jr authored 
      Dropped the never-released ap_has_cntrls() as it had very limited 
and inefficient application at that, added ap_scan_vchar_obstext()
to accomplish a similar purpose.

Dropped HttpProtocolOptions StrictURL option, this will be better
handled in the future with a specific directive and perhaps multiple
levels of scrutiny, use ap_scan_vchar_obstext() to simply ensure there
are no control characters or whitespace within the URI.

Changed the scanning of the response header table by check_headers()
to follow the same rulesets as reading request headers. Disallow any
CTL character within a response header value, and any CTL or whitespace
in response header field name, even in strict mode.

Apply HttpProtocolOptions Strict to chunk header parsing, invalid
whitespace is invalid, line termination must follow CRLF convention.



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1764961 13f79535-47bb-0310-9956-ffa450edef68
      7454dbad