summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd
AgeCommit message (Expand)Author
2024-04-29plug fd leak introduced in "avoid toctu" rewrite.Florian Obser
2024-04-16Prevent toctu issues in static file serving and auto index generation.Florian Obser
2024-04-09Sync removal of setsid(), setpgid() and a few dup2() from relayd. They areTobias Heider
2024-04-08Call daemon() only in parent and before proc_exec() to avoid orphaning childTobias Heider
2024-03-24Sync with IANA Status Code RegistryJob Snijders
2024-02-13Stop logging misleading errors when custom generic error pages are in use.Claudio Jeker
2024-01-17Convert to use imsg_get_fd() since proc_forward_imsg() never forwards aClaudio Jeker
2024-01-17Get all variable-length values for the parent server before linking theClaudio Jeker
2024-01-06put the real sizes into the "title" attribute so that hovering shows theMarc Espie
2024-01-04make auto-index betterMarc Espie
2023-12-28don't add values we won't print, use scandir properlyMarc Espie
2023-11-08Avoid a NULL dereference when handling a malformed fastcgi request.Todd C. Miller
2023-11-08remove accidental double spaceTheo de Raadt
2023-11-03Be explicit in saying what a shell pattern is.Marc Espie
2023-10-29Unmention/don't explain SSL, drop 9y old "ssl" keyword/deprecation warningKlemens Nanni
2023-09-03Use EVBUFFER_DATA instead of reaching into struct evbuffer. ok tbNicholas Marriott
2023-08-17use "example.com" instead of "default" as server name in the variousOmar Polo
2023-07-12Work around use after free in httpd(8)Theo Buehler
2023-03-08Delete obsolete /* ARGSUSED */ lint comments.Philip Guenther
2023-02-15proc_ispeer() is not used anywhere anymore so remove it everywhere.Tobias Heider
2022-12-28spelling fixes; from paul tagliamonteJason McIntyre
2022-10-24remove unused references to httpd.sock; found by dante catalfamoJason McIntyre
2022-09-21Default request message body size should be 0.YASUOKA Masahiko
2022-09-02Make newer mime type definitions take precedence over existing ones.Sebastian Benoit
2022-09-01ugly whitespaceTheo Buehler
2022-08-15Neither clt_descreq nor clt_descresp in struct client need to be void *.Claudio Jeker
2022-08-15For FCGI_END_REQUEST reset the clt struct similar to what is done in theClaudio Jeker
2022-08-15plug some memory leaks in server_file_index when failures occurOmar Polo
2022-08-15plug a fd leak in read_errdoc if fstat fails or if the file is emptyOmar Polo
2022-08-12Use break instead of return so that a HEAD request still consumes all data.Claudio Jeker
2022-08-12fix regression introduced in previous commit. HEAD replies don't have aOmar Polo
2022-08-11correctly handle an abnormal fastcgi termination. httpd handles theOmar Polo
2022-03-09bandwith -> bandwidthJonathan Gray
2022-03-04Only provide the .gz file if timestamp is >= the non-gzip file. MakeTheo de Raadt
2022-03-02struct stat from early file inspection was being used after actual fileTheo de Raadt
2022-03-02Simplify .gz handling a bitTheo Buehler
2022-03-02Nothing uses kv_flags.Florian Obser
2022-02-27Add gzip-static option to httpd. This allows to deliver precompressedAlexander Bluhm
2022-02-18prefer https links in man pagesJonathan Gray
2021-12-04Do not setup pipes between SERVER processes, they don't talk to eachFlorian Obser
2021-11-11Move the assignment of http_query down. Also do not assign a non-mallocedClaudio Jeker
2021-11-05Perform stricter checking on the version string (which RFC 7230 saysSebastian Benoit
2021-10-24Add httpd custom error page facility. Adapted by me fromIan Darwin
2021-10-23* stop sending the content for head requests, even when its supplied by theSebastian Benoit
2021-10-23annotate a 413 error with "request body too large" in the error log.Sebastian Benoit
2021-10-22return unsupported version for version less than HTTP/0.9 and higherSebastian Benoit
2021-10-21when a client sends header lines without a colon, respond with 400 BadSebastian Benoit
2021-10-15Don't declare variables as "unsigned char *" that are passed toChristian Weisgerber
2021-07-14Remove unneeded calls to tls_init(3)kn
2021-06-07tweak previous: avoid markup and refer to an HTTP header only by itsTheo Buehler