| Age | Commit message (Expand) | Author |
|---|
| 2015-01-19 | Decouple auth parameters from struct server_config into struct auth. | Reyk Floeter |
| 2015-01-18 | tweak previous | Florian Obser |
| 2015-01-18 | First stab at implementing basic auth. | Florian Obser |
| 2015-01-16 | Replace <sys/param.h> with <limits.h> and other less dirty headers where | Theo de Raadt |
| 2015-01-13 | bump copyright year | Reyk Floeter |
| 2015-01-13 | Abort if fcgi_chunked is not true to avoid sending additional garbage | Reyk Floeter |
| 2015-01-07 | SVG is common enough to add it to the default types. | Reyk Floeter |
| 2015-01-07 | Relax configuration list parsing to allow multi-line blocks for tls, | Reyk Floeter |
| 2015-01-06 | Make httpd return "404 not found" if an intermediate component of a requested | Stefan Sperling |
| 2015-01-06 | I missed one goto abort instead of free(line). | Reyk Floeter |
| 2015-01-06 | Only open a socket once for each unique "listen on" statement. This | Reyk Floeter |
| 2015-01-06 | Instead of calling free(line) in each error case, call it once in fail:. | Reyk Floeter |
| 2015-01-06 | Return "400 Bad Request" instead of "500 Internal Server Error" for | Reyk Floeter |
| 2015-01-05 | Be more specific: path is a component of the URI/URL, so use "path" | Reyk Floeter |
| 2015-01-04 | add new url stripping option: | Christopher Zimmermann |
| 2015-01-03 | Reset tls key and cert to NULL when duplicating a server - avoids a | Reyk Floeter |
| 2015-01-03 | Tweak previous - add a missing free in the error path. | Reyk Floeter |
| 2015-01-03 | Support alias names and multiple listen statements per server block. | Reyk Floeter |
| 2015-01-02 | Bump config flags field to 32bits. Makes room for future changes - | Reyk Floeter |
| 2015-01-01 | Use the HTML5 doctype for error and auto index pages because it is | Reyk Floeter |
| 2014-12-28 | Change the default example from "listen on egress" to "listen on *". | Reyk Floeter |
| 2014-12-21 | Stop pulling in <arpa/inet.h> or <arpa/nameser.h> when unnecessary. | Philip Guenther |
| 2014-12-18 | Document * and :: to listen on all IPv4 or IPv6 addresses. | Reyk Floeter |
| 2014-12-18 | Accept * as an alias for the default ipv4 listen address. | Reyk Floeter |
| 2014-12-18 | "tcp nodelay" shouldn't be discussing relaying SSH; this was a remnant | Reyk Floeter |
| 2014-12-16 | Replace setpgrp(0, getpid()) with setpgid(0, 0). OK deraadt@ tedu@ | Todd C. Miller |
| 2014-12-12 | Like previously done in relayd, change the keyword "ssl" to "tls" to | Reyk Floeter |
| 2014-12-11 | When scanning backwards for the last dot in a filename, | Ingo Schwarze |
| 2014-12-08 | Do not send an error body in a HEAD request answer. | Florian Obser |
| 2014-12-07 | Avoid NULL deref in error case; found with llvm. | Florian Obser |
| 2014-12-04 | stop viral header propagation. none of this code uses sys/hash.h | Ted Unangst |
| 2014-11-22 | use size_t where appropriate. ok deraadt reyk | Ted Unangst |
| 2014-11-21 | white space begone | Theo de Raadt |
| 2014-11-20 | Don't allow embedded nul characters in strings. | Jonathan Gray |
| 2014-11-12 | tweak previous; | Jason McIntyre |
| 2014-11-11 | Allow the log directory to be configurable in the config file, rather than | Bob Beck |
| 2014-11-10 | Don't attempt to open log files when using syslog, as we are not going to | Bob Beck |
| 2014-11-03 | Convert the logic in yyerror(). Instead of creating a temporary | Alexander Bluhm |
| 2014-11-03 | Add gcc format attributes to yyerror() in httpd. | Doug Hogan |
| 2014-10-31 | Update httpd(8) to use libtls instead of libressl. | Joel Sing |
| 2014-10-25 | Remove unnecessary netinet/in_systm.h include. | Lawrence Teo |
| 2014-10-22 | URL-decode the request path. | Reyk Floeter |
| 2014-10-21 | Rework the error message a little bit: Do not send details of the | Reyk Floeter |
| 2014-10-03 | Update ressl configuration to handle recent changes in the library. | Joel Sing |
| 2014-10-02 | Fix an error case that was never handled ending up in an endless event | Reyk Floeter |
| 2014-09-29 | whitespace spotted while studying the code | Theo de Raadt |
| 2014-09-27 | In addition to READ, disable WRITE events when closing the file | Reyk Floeter |
| 2014-09-15 | Make the HTTP version mandatory and abort if it is missing in the request. | Reyk Floeter |
| 2014-09-10 | Handle different possible variations of the Host header (eg. | Reyk Floeter |
| 2014-09-05 | Add various RFC-based WebDAV methods to the list of accepted HTTP methods. | Reyk Floeter |
