Commits · 9c91b6862feed661a29504e9b68764b41eed14fa · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

14 Dec, 2003 1 commit

SECURITY [CAN-2003-0020]: escape arbitrary data before writing into the · 9c91b686

Andre Malo authored Dec 14, 2003

  errorlog.

Reviewed by: Mark J Cox, Erik Abele, Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@102061 13f79535-47bb-0310-9956-ffa450edef68

9c91b686

04 Dec, 2003 1 commit

Add '%X' as an alias for '%c' in LogFormat. Both work and · ac7e700a

Jim Jagielski authored Dec 04, 2003

do the same thing, so we don't have backwards compatibility
problems, but now people can adjust to use '%X' to log
the connection status when using mod_ssl (which changes
what '%c' means)

PR:
Obtained from: Apache 2.x
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101985 13f79535-47bb-0310-9956-ffa450edef68

ac7e700a

27 Nov, 2003 1 commit

Note the usertrack bug... patch coming soon · 7ddeca8f

Jim Jagielski authored Nov 27, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101903 13f79535-47bb-0310-9956-ffa450edef68

7ddeca8f

21 Nov, 2003 1 commit

axe a comment that was removed long ago then re-emerged with the massive · b5420f70

Jeff Trawick authored Nov 21, 2003

proxy changes

PR: 18628
Submitted by: Joshua Colvin <joshua safeweb.com>
Reviewed by:  Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101833 13f79535-47bb-0310-9956-ffa450edef68

b5420f70

17 Nov, 2003 1 commit

Make UseCanonicalName off correctly grab port info from · 39c0af16

Jim Jagielski authored Nov 17, 2003

the client. Make UseCanonicalName socket port aware.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101803 13f79535-47bb-0310-9956-ffa450edef68

39c0af16

12 Nov, 2003 1 commit

· 8dbeeb72

William A. Rowe Jr authored Nov 12, 2003

  Obscuficate contributors' email addresses in an obvious and simple to read manner.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101766 13f79535-47bb-0310-9956-ffa450edef68

8dbeeb72

09 Nov, 2003 1 commit

add missing license · ae505a52

Andre Malo authored Nov 09, 2003

Reviewed by: Greg Stein


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101731 13f79535-47bb-0310-9956-ffa450edef68

ae505a52

07 Nov, 2003 1 commit

I did the OS/2 binary a few days ago. · cf61b37b

Brian Havard authored Nov 07, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101709 13f79535-47bb-0310-9956-ffa450edef68

cf61b37b

30 Oct, 2003 2 commits

Did the OS X 10.3 bin build · 8d1a5f62

Jim Jagielski authored Oct 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101627 13f79535-47bb-0310-9956-ffa450edef68

8d1a5f62

Some binaries are already in place · cad23cd5

Martin Kraemer authored Oct 30, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101623 13f79535-47bb-0310-9956-ffa450edef68

cad23cd5

29 Oct, 2003 1 commit

Note release/announce date · a0854811

Jim Jagielski authored Oct 29, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101602 13f79535-47bb-0310-9956-ffa450edef68

a0854811

24 Oct, 2003 2 commits

And we are at 1.3.30-dev · 13b5184b

Jim Jagielski authored Oct 24, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101554 13f79535-47bb-0310-9956-ffa450edef68

13b5184b

Bump up for 1.3.29. Fold in the CAN-2003-0542 regex patch. · f3c1d595

Jim Jagielski authored Oct 24, 2003

Get ready to tag.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101552 13f79535-47bb-0310-9956-ffa450edef68

f3c1d595

22 Oct, 2003 2 commits

German translation of the Announcement · f8845875

Astrid Kessler authored Oct 22, 2003

Reviewed by:	nd


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101528 13f79535-47bb-0310-9956-ffa450edef68

f8845875

Hmmm... Let work up an Announcement · 8c3602c1

Jim Jagielski authored Oct 22, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101524 13f79535-47bb-0310-9956-ffa450edef68

8c3602c1

20 Oct, 2003 1 commit

I'm tending to think we should *not* change this for 1.3.29. · 713d80d1

Jim Jagielski authored Oct 20, 2003

I foresee problems when even though the patch corrects
behavior, the (previous) incorrect behavior might be
used and expected in various ways throughout the community.
And I don't want to pull the rug out from under them.

Instead, let's see about folding this is for 1.3.30 after
some extensive testing.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101495 13f79535-47bb-0310-9956-ffa450edef68

713d80d1

19 Oct, 2003 3 commits

In ap_bclose(), we always use ap_pclosesocket() when the fd · 64e18c30

Jim Jagielski authored Oct 19, 2003

points to a socket and ap_bclosef() it it's a file (we stay
aware of Windows handles however). Also, we stay consistent
and use closesocket() whenever we wish to close a socket
directly. For Unix, closesocket() is simply a macro define to
close, but it makes a big difference for other OSs.

PR: 22805
Obtained from:
Submitted by:	bnicholes, jeff
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101492 13f79535-47bb-0310-9956-ffa450edef68

64e18c30

fix wording of warning for ErrorDocument 401 full-URL · 089fa7da

Jeff Trawick authored Oct 19, 2003

Reviewed by: jim, jwoolley


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101491 13f79535-47bb-0310-9956-ffa450edef68

089fa7da

add a vote · cd0b5477

Jeff Trawick authored Oct 19, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101490 13f79535-47bb-0310-9956-ffa450edef68

cd0b5477

18 Oct, 2003 5 commits

yep · 6ec72ce8

Cliff Woolley authored Oct 18, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101487 13f79535-47bb-0310-9956-ffa450edef68

6ec72ce8

If a request fails and the client will be redirected to another URL · b8059ab0

Jeff Trawick authored Oct 18, 2003

due to ErrorDocument, see if we need to drop the connection after
sending the 302 response. This fixes a problem where Apache treated
the body of the failed request as the next request on a keepalive
connection. The subsequent 501 error sent to the browser prevented
some browsers from fetching the error document.

Reviewed by: roy, jim

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101486 13f79535-47bb-0310-9956-ffa450edef68

b8059ab0

Tally votes. · f10a0b8a

Jim Jagielski authored Oct 18, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101485 13f79535-47bb-0310-9956-ffa450edef68

f10a0b8a

Add in my votes and move 2 items to "showstopper" status · 5e257c0a

Jim Jagielski authored Oct 18, 2003

since I'd like these resolved before 1.3.29... I know,
I know, not really showstoppers, but until I think of another
category, I want these looked at seriously.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101484 13f79535-47bb-0310-9956-ffa450edef68

5e257c0a

document an on-list vote from Roy · 5cea4f73

Jeff Trawick authored Oct 18, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101483 13f79535-47bb-0310-9956-ffa450edef68

5cea4f73

17 Oct, 2003 1 commit

add a couple more 1.3 patches for consideration · cb3d59b4

Jeff Trawick authored Oct 17, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101480 13f79535-47bb-0310-9956-ffa450edef68

cb3d59b4

16 Oct, 2003 4 commits

Note patch · 337a6f9b

Jim Jagielski authored Oct 16, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101472 13f79535-47bb-0310-9956-ffa450edef68

337a6f9b

*) Fixed mod_usertrack to not get false positive matches on the · 691626e4

Jim Jagielski authored Oct 16, 2003

     user-tracking cookie's name.  PR 16661.
     [Manni Wood <manniwood@planet-save.com>]


PR: 16661 (2.x)
Obtained from:
Submitted by:
Reviewed by:	cliff, jeff, jim


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101471 13f79535-47bb-0310-9956-ffa450edef68

691626e4

After reviewing http://www.manniwood.net/apache_stuff/mod_usertrack_patch.html · 6b9afc6d

Jim Jagielski authored Oct 16, 2003

(thanks Cliff) I'm now +1.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101470 13f79535-47bb-0310-9956-ffa450edef68

6b9afc6d

Update STATUS · b44b89d6

Jim Jagielski authored Oct 16, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101467 13f79535-47bb-0310-9956-ffa450edef68

b44b89d6

15 Oct, 2003 1 commit

Also note that I plan to remove the various places with · 102aa241

Jim Jagielski authored Oct 15, 2003

http_main.c where we have

#ifdef BEOS
        closesocket(s);
#else
        close(s);
#endif

which is bogus.... unless somehow this is required for
the WIN32/Netware :/

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101454 13f79535-47bb-0310-9956-ffa450edef68

102aa241

14 Oct, 2003 2 commits

Note Jeff's ap_die() observations · f95f2889

Jim Jagielski authored Oct 14, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101453 13f79535-47bb-0310-9956-ffa450edef68

f95f2889

Start the ball rolling regarding 1.3.29. Note some · bc3a5d7f

Jim Jagielski authored Oct 14, 2003

items which are "showstoppers" in as far as I would
like to see them addressed (either fixed/folded in or
moved to non-showstopper status after dev consensus).

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101452 13f79535-47bb-0310-9956-ffa450edef68

bc3a5d7f

13 Oct, 2003 2 commits

Nit-picking: there's no 'apache-announce' list in this context ;) · 5869086f

Erik Abele authored Oct 13, 2003

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101435 13f79535-47bb-0310-9956-ffa450edef68

5869086f

Submitted by: Thomas Kjeldsen · bec2d386

Richard Bowen authored Oct 13, 2003

Reviewed by: Mads Toftum, Rich Bowen
Correct some URLs and awkward phrasing. Update a ./configure flag that
was changed a while ago.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101433 13f79535-47bb-0310-9956-ffa450edef68

bec2d386

21 Sep, 2003 1 commit

keep the parse tree consistent if a binary operator occurs within · d0e118d6

Andre Malo authored Sep 21, 2003

parentheses.

Reviewed by: Brian Pane, Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101302 13f79535-47bb-0310-9956-ffa450edef68

d0e118d6

18 Sep, 2003 3 commits

Oops, wrong comment style · c454ef5f

Bradley Nicholes authored Sep 18, 2003


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101291 13f79535-47bb-0310-9956-ffa450edef68

c454ef5f

· 6efebe87

William A. Rowe Jr authored Sep 18, 2003

Thanks for revisiting this, Brad :-) One down, remainder apply to
all threaded platforms.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101284 13f79535-47bb-0310-9956-ffa450edef68

6efebe87

Enabled the RFC1413 ident functionality for Win32 and NetWare. Also introduced · 2b1b8fe6

Bradley Nicholes authored Sep 18, 2003

a thread-safe socket timeout alternative that can be adapted for other non-winsock
platforms

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101283 13f79535-47bb-0310-9956-ffa450edef68

2b1b8fe6

16 Sep, 2003 2 commits

Rolling back to revision 1.41 until we can figure out what thread-safety issues · 218a35f1

Bradley Nicholes authored Sep 16, 2003

exist with indent on NetWare


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101259 13f79535-47bb-0310-9956-ffa450edef68

218a35f1

Enable rfc1413 ident functionality on NetWare. Win32 may also need to · 120edf38

Bradley Nicholes authored Sep 16, 2003

include these #defines

Submitted by: G�nter Knauf <gk@gknw.de>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x@101258 13f79535-47bb-0310-9956-ffa450edef68

120edf38