summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd/server_http.c
AgeCommit message (Expand)Author
2017-03-10Sync from relayd: DELETE can have a body.Reyk Floeter
2017-02-07Improve parsing of the HTTP request lineReyk Floeter
2017-02-02Fix support for HTTP pipelining by handling all requests in the buffer.Reyk Floeter
2017-01-31Reimplement httpd's support for byte ranges.Reyk Floeter
2017-01-31The variable clt_done is used in too many places.Reyk Floeter
2016-08-26Replace the static env variables with a single global variable.Rafael Zalamena
2016-07-27According to RFC 7231 4.3.7, OPTIONS may have body. "Although thisReyk Floeter
2016-05-27Return "400 Bad Request" instead of "500 Server Internal Error" forKenneth R Westerback
2016-05-22makes sure the value of the asprintf buffer is zeroed on errorJoerg Jung
2016-03-08Set content charset for auto index generated page.Florian Obser
2016-02-11Back out previous; requested by jung@Tim van der Molen
2016-02-11Include the server port number in the common and combined logs. This is usefulTim van der Molen
2015-12-07No need to check for NULL before free().mmcc
2015-12-03Remove unnecessary NULL checks before free().Reyk Floeter
2015-10-13Plug a leak.Sunil Nimmagadda
2015-10-13Pass unsigned chars to ctype functions.Reyk Floeter
2015-09-07Fix a regression that was introduced with server.c r1.64: Do NOT freeReyk Floeter
2015-08-21The WebDAV MOVE method was not included in the switch statementReyk Floeter
2015-08-20Change httpd(8) to use C99-style fixed-width integers (uintN_t insteadReyk Floeter
2015-07-31repair hsts header output, wrong format strings caused brokenSebastian Benoit
2015-07-29backout the previous: it broke wordpress somehow.Reyk Floeter
2015-07-29Read fcgi response records until we have the whole http header and canFlorian Obser
2015-07-23The realm in authenticate directive of config file isn't escaped for '"' char.Sebastien Marie
2015-07-19For the completeness of HSTS, add the non-standard preload option.Reyk Floeter
2015-07-18Allow to change the default media type globally or per-location,Reyk Floeter
2015-07-18Implement HTTP Strict Transport Security (HSTS).Florian Obser
2015-07-16spacingReyk Floeter
2015-07-15Escape the message in server_log() as well.Reyk Floeter
2015-07-15For some values like the User-Agent, use vis(3) instead of url_encode().Reyk Floeter
2015-07-15Simplify the error path of the previous commit: by using ret = -1 byReyk Floeter
2015-07-15httpd don't sanitize variables before putting them in logs. It is possible forsemarie
2015-06-23escape the matched substrings before using it in expansion.semarie
2015-06-23Add initial support for pattern matching using Lua's pattern matching code.Reyk Floeter
2015-06-22After the last change, we also have to url_encode $SERVER_NAME andReyk Floeter
2015-06-21When encoding the Location url, only encode the query and pathReyk Floeter
2015-05-20Use off_t instead of size_t to pass file size and print it using %lld whenMark Kettenis
2015-05-03Implement byte ranges.Florian Obser
2015-04-18Regis Leroy reported that httpd does not strictly accept CRLF forJonathan Gray
2015-04-09Revert previous as this breaks stuff.Florian Obser
2015-04-08Do not silently accept multiple Content-Length headers.Florian Obser
2015-02-23Allow to specify CGI variables as macros in redirection strings, eg.Reyk Floeter
2015-02-08spacingReyk Floeter
2015-02-07spacingReyk Floeter
2015-02-07Add support for blocking, dropping, and redirecting requests.Reyk Floeter
2015-02-06Fix log options in locations.Reyk Floeter
2015-02-05Fix potential NULL pointer dereference.Reyk Floeter
2015-01-21httpd is based on relayd and had included many headers that are onlyReyk Floeter
2015-01-19Log the remote user in the access.log.Florian Obser
2015-01-19s/clt_fcgi_remote_user/clt_remote_user/Florian Obser
2015-01-19Decouple auth parameters from struct server_config into struct auth.Reyk Floeter