Commits · b595ca928e4465d5144babfbbb1550c1ea60e956 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

02 Dec, 2014 3 commits

make docs · b595ca92

Jeff Trawick authored Dec 02, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642849 13f79535-47bb-0310-9956-ffa450edef68

b595ca92

core: Add CGIPassAuth directive to control whether HTTP authorization · bc6270ac

Jeff Trawick authored Dec 02, 2014

headers are passed to scripts as CGI variables.

PR: 56855


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642847 13f79535-47bb-0310-9956-ffa450edef68

bc6270ac

Fix curly braces style · adbb9c1f

Christophe Jaillet authored Dec 02, 2014

Remove useless empty lines

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642803 13f79535-47bb-0310-9956-ffa450edef68

adbb9c1f

30 Nov, 2014 7 commits

· cb05dc29

Eric Covener authored Nov 30, 2014

xforms


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642591 13f79535-47bb-0310-9956-ffa450edef68

cb05dc29

use an actual list since we're gong to the trouble to use -in · 9ca3f0ac

Eric Covener authored Nov 30, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642590 13f79535-47bb-0310-9956-ffa450edef68

9ca3f0ac

xforms · e18b4057

Eric Covener authored Nov 30, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642585 13f79535-47bb-0310-9956-ffa450edef68

e18b4057

add a few more examples per feedback · a5110347

Eric Covener authored Nov 30, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642584 13f79535-47bb-0310-9956-ffa450edef68

a5110347

even out some whitespace · 61f1410e

Eric Covener authored Nov 30, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642581 13f79535-47bb-0310-9956-ffa450edef68

61f1410e

backported in r1641551 · 995e2f5d

Eric Covener authored Nov 30, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642501 13f79535-47bb-0310-9956-ffa450edef68

995e2f5d

*) SECURITY: CVE-2014-8109 (cve.mitre.org) · 2d16863c

Eric Covener authored Nov 30, 2014

     mod_lua: Fix handling of the Require line when a LuaAuthzProvider is
     used in multiple Require directives with different arguments.
     PR57204 [Edward Lu <Chaosed0 gmail.com>]

Submitted By: Edward Lu
Committed By: covener



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642499 13f79535-47bb-0310-9956-ffa450edef68

2d16863c

29 Nov, 2014 3 commits

Remove some instances where a RewriteBase must be specified · 99ff5b36

Eric Covener authored Nov 29, 2014

Previously, any time you used a relative substitution in 
per-directory/htaccess context, you needed to specify
a RewriteBase. But in case where the context document root 
and context prefix are known via e.g. mod_userdir
or mod_alias, and the substitution is under the context 
document root, we can determine the replacement automatically.

This makes htaccess files or config snippets a bit more
portable.




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642484 13f79535-47bb-0310-9956-ffa450edef68

99ff5b36

Rebuild. · 7606c8dd

Lucien Gentis authored Nov 29, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642451 13f79535-47bb-0310-9956-ffa450edef68

7606c8dd

XML updates. · 99ae95d2

Lucien Gentis authored Nov 29, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642450 13f79535-47bb-0310-9956-ffa450edef68

99ae95d2

27 Nov, 2014 2 commits

* ap_exr: Add replace(string, from, to) function. · 1e4c493c

Jan Kaluža authored Nov 27, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642154 13f79535-47bb-0310-9956-ffa450edef68

1e4c493c

Added include path for NetWare build. · e9f84fdd

Guenter Knauf authored Nov 27, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1642099 13f79535-47bb-0310-9956-ffa450edef68

e9f84fdd

26 Nov, 2014 2 commits

xforms · 26bf0eba

Eric Covener authored Nov 26, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641889 13f79535-47bb-0310-9956-ffa450edef68

26bf0eba

add a few more expresion examples to illustrate functions and -f · 71fd830f
Eric Covener authored Nov 26, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641888 13f79535-47bb-0310-9956-ffa450edef68
```
71fd830f

25 Nov, 2014 2 commits

mod_lua: Initial attempt at passing on the configuration tree to Lua. · 5bd03679
Daniel Gruno authored Nov 25, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641661 13f79535-47bb-0310-9956-ffa450edef68
```
5bd03679

elaborate on a TRACE2 message about using the default reverse · 913cedee

Eric Covener authored Nov 25, 2014

proxy worker. 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641636 13f79535-47bb-0310-9956-ffa450edef68

913cedee

24 Nov, 2014 10 commits

· c45d5855

Eric Covener authored Nov 24, 2014

xforms


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641435 13f79535-47bb-0310-9956-ffa450edef68

c45d5855

move text outside of example for readability. · 62fec53d

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641434 13f79535-47bb-0310-9956-ffa450edef68

62fec53d

xforms · 52bd02f9

Eric Covener authored Nov 24, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641415 13f79535-47bb-0310-9956-ffa450edef68

52bd02f9

steal the sethandler example from mod_proxy.html and mention worker issue · 52b87ddc
Eric Covener authored Nov 24, 2014
```
 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641414 13f79535-47bb-0310-9956-ffa450edef68
```
52b87ddc

xforms · 747c919c

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641385 13f79535-47bb-0310-9956-ffa450edef68

747c919c

the next sentence says: · 0d6c195f

Eric Covener authored Nov 24, 2014

The URL argument must be parsable as a URL before regexp substitutions (as well as after). This limits the matches you can use. For instance, if we had used




git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641384 13f79535-47bb-0310-9956-ffa450edef68

0d6c195f

test/document php-fpm with proxy_fcgi · 630d6173

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641382 13f79535-47bb-0310-9956-ffa450edef68

630d6173

Return a match whenever we get to the end of the worker name, regardless · bcd35f71

Eric Covener authored Nov 24, 2014

of whether there is URL left.

ProxyPassMatch had been using the default worker in trunk.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641381 13f79535-47bb-0310-9956-ffa450edef68

bcd35f71

mod_reqtimeout: don't extend the timeout in speculative mode, wait for the · 8284fdfa

Yann Ylavic authored Nov 24, 2014

real (relevant) bytes to be asked later, within the currently alloted time.
This applies to blocking reads only since r1621453 already bypassed the
filter for nonblocking ones.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641376 13f79535-47bb-0310-9956-ffa450edef68

8284fdfa

surprising but confirmed by comment in mod_proxy · e952b933

Eric Covener authored Nov 24, 2014



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641311 13f79535-47bb-0310-9956-ffa450edef68

e952b933

22 Nov, 2014 2 commits

follow up to r1641077: · 0678fa7b

Jeff Trawick authored Nov 22, 2014

one bug was traded for another in r1641077; track the response
length and the cached object length separately to avoid such
confusion


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641095 13f79535-47bb-0310-9956-ffa450edef68

0678fa7b

mod_ssl: Fix recognition of OCSP stapling responses that are encoded · 8d5e0907

Jeff Trawick authored Nov 22, 2014

         improperly or too large.

The one byte "ok" flag stored with the response was accounted for in
the wrong condition.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1641077 13f79535-47bb-0310-9956-ffa450edef68

8d5e0907

20 Nov, 2014 3 commits

mod_reqtimeout: revert r1640758. · 29dc0b77

Yann Ylavic authored Nov 20, 2014

Unexpected functional change.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640823 13f79535-47bb-0310-9956-ffa450edef68

29dc0b77

mpm_event(opt), mpm_worker, mpm_prefork: follow up to r1635521, r1640161. · a880f55f

Yann Ylavic authored Nov 20, 2014

Retain num_buckets and max_buckets accross restarts so that we can determine
whether new buckets were allocated and set their idle_spawn_rate at the same
level as the existing ones (max).

Also, adjust ap_daemons_limit and ap_daemons_to_start lower bounds at mpm_run()
time, once num_buckets is available for the current generation (previously done
at pre_config time, hence before num_buckets is computed, and then with the
previous generation's value).

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640763 13f79535-47bb-0310-9956-ffa450edef68

a880f55f

mod_reqtimeout: avoid unnecessary calls to apr_socket_timeout_set(). · 5abdc4d7
Yann Ylavic authored Nov 20, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640758 13f79535-47bb-0310-9956-ffa450edef68
```
5abdc4d7

19 Nov, 2014 1 commit
- * mod_proxy_fcgi: Ignore body data from backend for 304 responses. PR 57198. · 570883b3
  Jan Kaluža authored Nov 19, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640495 13f79535-47bb-0310-9956-ffa450edef68
```
  570883b3
18 Nov, 2014 4 commits

mod_authnz_fcgi: we don't need to reserve an extra response header byte since r1640036. · 109d4763
Yann Ylavic authored Nov 18, 2014
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640345 13f79535-47bb-0310-9956-ffa450edef68
```
109d4763

mod_authnz_fcgi is not vulnerable to the CVE-2014-3583 bug · 894cf92e

Jeff Trawick authored Nov 18, 2014

(and it is too late to use the same CVE anyway).

The code changes to mod_authnz_fcgi are retained in order
to keep the similar code in sync between the two modules.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640331 13f79535-47bb-0310-9956-ffa450edef68

894cf92e

Rebuild. · bd4ea346

Lucien Gentis authored Nov 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640296 13f79535-47bb-0310-9956-ffa450edef68

bd4ea346

XML update. · f1877bf5

Lucien Gentis authored Nov 18, 2014


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640295 13f79535-47bb-0310-9956-ffa450edef68

f1877bf5

17 Nov, 2014 1 commit

mpm_prefork: follow up to r1635521. · c2c923c3

Yann Ylavic authored Nov 17, 2014

Avoid oddity on bucket_make_child_record overflow.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1640184 13f79535-47bb-0310-9956-ffa450edef68

c2c923c3