summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd
AgeCommit message (Collapse)Author
2006-11-06fix proxying on big-endian 64-bit machines, u_long is not the size ofTheo de Raadt
an ip address, that's for sure; pr 5232 arjones@simultan.dyndns.org
2006-09-26escape error response to unsupported Expect: header, fixesDamien Miller
CVE-2006-3918; ok cloder@
2006-08-01add ProxyPreserveHost support to mod_proxy. it allows to pass the originalFederico G. Schwindt
Host header to the backend. default off. henning@ ok.
2006-07-28avoid printing the server built dateHenning Brauer
2006-07-28avoid printing server built date, we set that to "unknown" anywayHenning Brauer
leave the function there of course, it's part of the API
2006-07-28A vulnerability has been reported in Apache HTTP Server, which potentially canHenning Brauer
be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused by a off-by-one error in mod_rewrite and can be exploited to cause a one-byte buffer overflow. http://secunia.com/advisories/21197/ report "Alexey E. Suslikov" <cruel@texnika.com.ua>, the obvious fix mailed in by Stuart Henderson <stu@spacehopper.org>
2006-05-15set cur & max limits with MaxFOOPerChild instead of cur twiceHenning Brauer
From: John Wong <johnw@wonghome.net>, ok ckuethe
2006-04-13Fix pr 5073, httpd/mod_ssl can leak file descriptors in theBob Beck
case where an ssl connection is not found in the scache dbm Reported by, and fix suggested by Darrin Chandler <darrin@puffy.asicommunications.com> testing by me, ok henning@
2006-04-04dead code removalHenning Brauer
2006-04-04nuke bundled regex lib, we have and always used the OpenBSD one of courseHenning Brauer
From: Daniel Ouellet <daniel@presscom.net>
2006-04-04rip out bundled dbm, we've always used our dbmHenning Brauer
From: Daniel Ouellet <daniel@presscom.net>
2006-03-26add mime type for atomHenning Brauer
From: "Alex Holst" <a@mongers.org> "It's the brave new world of rss/atom feeds. It's what the kids want."
2006-03-22Remove four unused functions: ap_sync_scoreboard_image, reopen_scoreboard,Ray Lai
put_scoreboard_info, and update_scoreboard_global. From Daniel Ouellet, plus one line he missed. OK henning@ and otto@
2006-03-14fix sentence to make sense.Bob Beck
ok millert@ jmc@ ketennis@ and others from before 3.9 lock
2006-03-12more getopt() EOF crud; adobriyan@gmailTheo de Raadt
2006-02-22allow ressource limits for child processes to be set.Henning Brauer
from Chris Kuethe <chris.kuethe@gmail.com> running at UofA for months now, ok beck niallo, also tested mbalmer
2006-02-16add types for google earth shitzHenning Brauer
From: Alex Holst <a@mongers.org>
2006-02-13spelling in error message; ok otto@Kevin Steves
2006-02-11Fix a few "discards qualifier" warnings. From A. Farber in PR 5114.Otto Moerbeek
ok kettenis@
2006-01-20fix a cross-site scripting vulnerability in mod_imap;Robert Nagy
CVE-2005-3352 ok niallo@; henning@ no objections
2005-11-11Disable the TRACE method completely. It is a security risk and is notChad Loder
that useful for debugging. OK henning, deraadt
2005-09-27use xargs -r0 for our build processTheo de Raadt
2005-09-26deal with xargs new behaviour by using -r, okay deraadt@Pedro Martelletto
2005-09-09suexec.html.en was renamed, so update reference accordingly;Jason McIntyre
move the whole section to SEE ALSO, which is more appropriate anyway; from alexey e. suslikov;
2005-09-08ensure that renegotiation is performed for a transition from "SSLVerifyClientNiall O'Higgins
optional" to "SSLVerifyClient require" fixes CAN-2005-2700 ok henning@, "go for it" deraadt@
2005-08-14catched->caughtMiod Vallat
2005-08-12remove reference to non-existent sourcereorg.html;Jason McIntyre
discussed with tamas tevesz.
2005-08-12don't try to install a page that has been removed; ok jmc@Christian Weisgerber
2005-08-01from tamas tevesz:Jason McIntyre
==> two more historic modules have gone away
2005-07-29fro tamas tevesz:Jason McIntyre
==> de-multiviewification complete.
2005-07-29from tamas tevesz:Jason McIntyre
==> de-multiviewification complete. (rename *.html.html -> *.html)
2005-07-29from tamas tevesz:Jason McIntyre
==> some more alien platforms and obsolete info. the mod/core.html change is because 1) the target link doesn't exist, 2) it probably was meant to refer to misc/known_bugs.html in the first place, which just got removed. thanks henning for guidance.
2005-07-28from tamas tevesz:Jason McIntyre
further removal of irrelevant bits...
2005-07-28from tamas tevesz:Jason McIntyre
==> duplicate of the files of the same name in manual/vhosts/, save formatting and one extra remark in manual/vhosts/vhosts-in-depth.html. no references to either.
2005-07-28from tamas tevesz:Jason McIntyre
==> some obsolete info regarding apache 1.2
2005-07-28from tamas tevesz:Jason McIntyre
further removal of irrelevant stuff;
2005-07-27corresponding Makefile changes for removed files...Jason McIntyre
thanks henning for pointing this out; thanks tamas for prompt diff;
2005-07-27from tamas tevesz:Jason McIntyre
==> remove of a number of alien platforms ==> remove broken links in sitemap.html ==> remove unreferenced install_1_1.html
2005-07-27from tamas tevesz:Jason McIntyre
==> remove some unneeded history, and a little bit of rewording; ==> remove cygwin stuff
2005-07-27from tamas tevesz:Jason McIntyre
==> starting to cut the crap from modssl docs too
2005-07-27from tamas tevesz:Jason McIntyre
remove unused footers+headers: only one was used, which we inline for now;
2005-07-27from tamas tevesz:Jason McIntyre
remove useless script;
2005-07-27from tamas tevesz:Jason McIntyre
more altlangs removal, missed from previous sweep;
2005-07-26from tamas tevesz:Jason McIntyre
==> removal of language alternatives from manual/ and manual/mod/. ok henning@
2005-07-26remove details of PATH_INFO handling for historic versions of apache,Jason McIntyre
and the one and only reference to it; from tamas tevesz; ok henning@
2005-07-26first of a series of commits from tamas tevesz to clean up these docs:Jason McIntyre
thanks tamas! remove multiviews for bind.html;
2005-06-28Remove 'ab' (apache benchmark) from the tree becauseRobert Nagy
we don't install it, and 'ab' itself is buggy so that it will give false results. ok henning@
2005-06-20$OpenBSD -> $OpenBSD$Robert Nagy
ok henning@
2005-06-15zap usage of __LINE__ so we can do KNF without binary changes.Niall O'Higgins
ok henning@
2005-05-26Disable the internal expat since nothing uses it and it conflictsMarc Matteo
with ports that use other XML parsers. ok henning@ beck@