Commits · deaeb1407a553fcfe9a0c8158cad8a780c52139d · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP Apache Httpd

Oct 02, 2002

*) SECURITY: [CAN-2002-0840] HTML-escape the address produced by · deaeb140

William A. Rowe Jr authored Oct 02, 2002

     ap_server_signature() against this cross-site scripting
     vulnerability exposed by the directive 'UseCanonicalName Off'.
     Also HTML-escape the SERVER_NAME environment variable for CGI
     and SSI requests.  It's safe to escape as only the '<', '>',
     and '&' characters are affected, which won't appear in a valid
     hostname.  Reported by Matthew Murphy <mattmurphy@kc.rr.com>.
     [Brian Pane]


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97064 13f79535-47bb-0310-9956-ffa450edef68

deaeb140

· f439188f

William A. Rowe Jr authored Oct 02, 2002

Until we have a mechanism to allow PHP and others to 'raise their hand'
and claim 'POST' we have to continue to accept POST in the default
handler. Revert to rev 1.206 per Rbb's and wrowe's veto.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97063 13f79535-47bb-0310-9956-ffa450edef68

f439188f

I can't use England for my generic location anymore! · 45166c67

Mark J. Cox authored Oct 02, 2002

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97062 13f79535-47bb-0310-9956-ffa450edef68

45166c67

· b11bd150

Paul J. Reder authored Oct 02, 2002

Fix a core dump in mod_cache when it attemtped to store uncopyable
buckets. This happened, for instance, when a file to be cached
contained SSI tags to execute a CGI script (passed as a pipe
bucket). [Paul J. Reder]

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97058 13f79535-47bb-0310-9956-ffa450edef68

b11bd150

Sander reminded me that this was out of date. · edb96f2e

Ryan Bloom authored Oct 02, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97055 13f79535-47bb-0310-9956-ffa450edef68

edb96f2e

Ensure that output already available is flushed to the network · eaa02495

Jeff Trawick authored Oct 02, 2002

when the content-length filter realizes that no new output will
be available for a while. This helps some streaming CGIs as
well as some other dynamically-generated content.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97054 13f79535-47bb-0310-9956-ffa450edef68

eaa02495

Oct 01, 2002

i was born a rambling man... · 9e033fc1

Justin Erenkrantz authored Oct 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97050 13f79535-47bb-0310-9956-ffa450edef68

9e033fc1

Fix a mutex problem in mod_ssl session cache support which · 43799666

Jeff Trawick authored Oct 01, 2002

could lead to an infinite loop.

PR:                     12705
Diagnosis submitted by: amund.elstad@ergo.no (Amund Elstad)
Coded by:               Jeff Trawick


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97048 13f79535-47bb-0310-9956-ffa450edef68

43799666

bleeble blooble blam · 08b5530b

Greg Stein authored Oct 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97047 13f79535-47bb-0310-9956-ffa450edef68

08b5530b

Fix bug in the default handler. POST is not allowed on regular files. · 47617c4f

Greg Stein authored Oct 01, 2002

The resource must be handled by something *other* than the default
handler.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97046 13f79535-47bb-0310-9956-ffa450edef68

47617c4f

Some thoughts on file-agnostic Apache. (more thoughts later...) · 3b5a1ad3
Justin Erenkrantz authored Oct 01, 2002
```
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97045 13f79535-47bb-0310-9956-ffa450edef68
```
3b5a1ad3

I'm borderline obsessive compulsive regarding tabs, but you knew that... · 0697bc49

Justin Erenkrantz authored Oct 01, 2002

(Also correct directive usage)


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97044 13f79535-47bb-0310-9956-ffa450edef68

0697bc49

added a clarification about separation of proxy functionality and mod_cache; · 8bc1e962

Astrid Kessler authored Oct 01, 2002

added a link to mod_ssl (for proxy directives)

submitted by Irmund Thum <i.t@ithum.de>

with two minor corrections from me


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97043 13f79535-47bb-0310-9956-ffa450edef68

8bc1e962

· ac675d8c

William A. Rowe Jr authored Oct 01, 2002

  Offer more thoughts


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97041 13f79535-47bb-0310-9956-ffa450edef68

ac675d8c

some thoughts on reaching repos-agnostic behavior in apache · 19ee7b76

Greg Stein authored Oct 01, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97040 13f79535-47bb-0310-9956-ffa450edef68

19ee7b76

Sep 30, 2002

back out the stuff from mod_ssl that shouldn't have been committed. · 9af2c9ac

Ryan Bloom authored Sep 30, 2002

/me wonders why we have generated content in CVS.    :-(


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97039 13f79535-47bb-0310-9956-ffa450edef68

9af2c9ac

Call out the success cases when we don't get APR_SUCCESS back from the · 6f7e871c

Ryan Bloom authored Sep 30, 2002

network write. All other status codes result in c->aborted being set,
which allows the logs to note that the connection was aborted. Previous
to this patch, if the network cable was unplugged on the client, the server
would get APR_ETIMEUP, but we wouldn't note that the connection was
aborted.

Submitted by: Ryan Morgan <rmorgan@covalent.net>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97038 13f79535-47bb-0310-9956-ffa450edef68

6f7e871c

Update place of work. · 22b2d553

Aaron Bannert authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97035 13f79535-47bb-0310-9956-ffa450edef68

22b2d553

"Make install" would fail for released versions because they do not contain · 443db330

Martin Kraemer authored Sep 30, 2002

CVS directories....

Noticed by Marco Lorig, mlorig at gmx dot net.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97031 13f79535-47bb-0310-9956-ffa450edef68

443db330

Fix typo. · e6d01b47

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97030 13f79535-47bb-0310-9956-ffa450edef68

e6d01b47

New transformations. · 80358d14

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97027 13f79535-47bb-0310-9956-ffa450edef68

80358d14

Fix a broken URL. · fd1f42d6

Cliff Woolley authored Sep 30, 2002

Submitted by:  Sameer Manek <manek@ghur.net>


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97026 13f79535-47bb-0310-9956-ffa450edef68

fd1f42d6

New Japanese translations. · fcc9f9d1

Yoshiki Hayashi authored Sep 30, 2002

Forward port from 1.3.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97025 13f79535-47bb-0310-9956-ffa450edef68

fcc9f9d1

Update transformations. · 25fdf181

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97024 13f79535-47bb-0310-9956-ffa450edef68

25fdf181

Update Japanese translations. · fab76cd1

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97023 13f79535-47bb-0310-9956-ffa450edef68

fab76cd1

New XML. · d0327dd3

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97022 13f79535-47bb-0310-9956-ffa450edef68

d0327dd3

Update transformations. · 3c138ebe

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97020 13f79535-47bb-0310-9956-ffa450edef68

3c138ebe

New Japanese translations. · ed088945

Yoshiki Hayashi authored Sep 30, 2002

Submitted by: Hiroaki KAWAI <hawk@bcl.t.u-tokyo.ac.jp>
Reviewed by: Yoshiki Hayashi

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97019 13f79535-47bb-0310-9956-ffa450edef68

ed088945

New XML. · 0a3ac35a

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97018 13f79535-47bb-0310-9956-ffa450edef68

0a3ac35a

Regenerate directives.html.ja.jis. · 2a71b81f

Yoshiki Hayashi authored Sep 30, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97017 13f79535-47bb-0310-9956-ffa450edef68

2a71b81f

Allow CGI scripts that use POST and mod_dav to exist in the same location. · a07d0beb

Ryan Bloom authored Sep 30, 2002

Mod_Dav was always setting the r->handler field to "dav_handler", but
this means that mod_cgi won't run the script. According to my reading
of the DAV RFC, mod_dav shouldn't do anything at all with a POST request,
because it is impossible to know if the POST was meant for DAV or for some
other resource. We used to excuse POST from DAV processing, so I have
re-enabled that behavior.

PR: 13025

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97016 13f79535-47bb-0310-9956-ffa450edef68

a07d0beb

Sep 29, 2002

a dead link is removed plus the commented paragraph what points to a not · 3e2fc081

Astrid Kessler authored Sep 29, 2002

existing UR on the Apache site for former Apache 1.2 patches

Submitted by: Irmund Thum <i.t@ithum.de>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97015 13f79535-47bb-0310-9956-ffa450edef68

3e2fc081

a dead link is removed plus the commented paragraph what points to a not · 848c42a9

Astrid Kessler authored Sep 29, 2002

existing UR on the Apache site for former Apache 1.2 patches

submitted by: Irmund Thum <i.t@ithum.de>

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97014 13f79535-47bb-0310-9956-ffa450edef68

848c42a9

Add a link to Binding in the Users Guide section. · fb8214ce

David Shane Holden authored Sep 29, 2002


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97013 13f79535-47bb-0310-9956-ffa450edef68

fb8214ce

- fix several validation errors · 9ba46454

Andre Malo authored Sep 29, 2002

- introduce CSS class td.centered: guess, what it does ;-)
  please, use with care...


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97012 13f79535-47bb-0310-9956-ffa450edef68

9ba46454

ssl xml files are done · 0201a88c

Andre Malo authored Sep 29, 2002

added reminder for translation cross links


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97011 13f79535-47bb-0310-9956-ffa450edef68

0201a88c

- added two lacking definitions from old ssl_glossary · 1c12bc73

Andre Malo authored Sep 29, 2002

  (algorithm and session)
- fixed some links
- changed example from whatever.com to example.com...
- little markup & style fine tuning


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97010 13f79535-47bb-0310-9956-ffa450edef68

1c12bc73

New SSL XML, part two. · 27ae7b27

Andre Malo authored Sep 29, 2002

Submitted by: Thomas Sj�gren <thomas@northernsecurity.net>

[This is also not the original submission. I revised a lot
of things (structure, markup etc.)]

other files: style & markup fine tuning


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97009 13f79535-47bb-0310-9956-ffa450edef68

27ae7b27

Sep 28, 2002

- add the general ability to create zebra tables · fd45ca0d

Andre Malo authored Sep 28, 2002

  automagically (<table style="zebra">)
- allow some attributes in th (e.g. colspan)
- add ability for <h4> sections
- refuse to transform deeper nesting than h4


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97008 13f79535-47bb-0310-9956-ffa450edef68

fd45ca0d

· ee961440

William A. Rowe Jr authored Sep 28, 2002

  Clean this up a bit.

  1. A patch isn't an available patch without a reference to the thing,
     and if it applies to 2.0.

  2. It's ain't a showstopper if we released with the issue.  Cull out
     all the silly voting statistics.

  3. Update some bits I know are done.  Drop some 'discussion' and leave
     the meat of the issue.

  4. Escalate the CGI piping issue.  That one is really a serious issue.


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@97006 13f79535-47bb-0310-9956-ffa450edef68

ee961440