summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd
AgeCommit message (Expand)Author
2015-12-12Remove a needless inclusion of sys/cdefs.h. Inspired by reyk's recentmmcc
2015-12-07No need to check for NULL before free().mmcc
2015-12-07Add imsg "peerid" to debug messages (only within -DDEBUG).Reyk Floeter
2015-12-07sync with vmdReyk Floeter
2015-12-05EAGAIN handling for imsg_read. OK henning@ benno@Claudio Jeker
2015-12-03Remove unnecessary NULL checks before free().Reyk Floeter
2015-12-03the grammar can prompt DNS lookups, so pledge "dns" also.Theo de Raadt
2015-12-02sync with relayd, use proc_compose()Reyk Floeter
2015-11-23Retire socket_set_blockmode() in favor of the SOCK_NONBLOCK type flag.Reyk Floeter
2015-11-23Sync proc.c with iked.Reyk Floeter
2015-11-22Update log.c: change fatal() and fatalx() into variadic functions,Reyk Floeter
2015-11-21Once again, fix the license text. After many years, we just cannotReyk Floeter
2015-11-21Move local logging functions into httpd.c, and sync log.c with relayd -Reyk Floeter
2015-11-19Simplify all instances of get_string() and get_data() using malloc() andmmcc
2015-11-05pledge(2) for httpd.Florian Obser
2015-10-31revert -r1.42 as it breaks slowcgi and php-fpm setups as reported by jturnerJoerg Jung
2015-10-28Remove a few more NULL-checks before free.mmcc
2015-10-28While I'm in here, drop a NULL-check before free.mmcc
2015-10-26fix PATH_INFO for / requestsJoerg Jung
2015-10-14Two more char -> unsigned char in ctype functions.Reyk Floeter
2015-10-13Plug a leak.Sunil Nimmagadda
2015-10-13Pass unsigned chars to ctype functions.Reyk Floeter
2015-10-08fix an fd leak if socket connection fails; from Carlin BinghamJonathan Gray
2015-10-08fix a typo; from Carlin BinghamJonathan Gray
2015-09-11Fix server_handshake_tls() - we should only call server_input() in the caseJoel Sing
2015-09-10fix return type for tls_read/writeBob Beck
2015-09-10fix after libtls api changesBob Beck
2015-09-10Update httpd to call tls_handshake() after tls_accept_socket().Joel Sing
2015-09-07Fix a regression that was introduced with server.c r1.64: Do NOT freeReyk Floeter
2015-08-21The WebDAV MOVE method was not included in the switch statementReyk Floeter
2015-08-20stdlib.h is in scope; do not cast malloc/calloc/realloc*Theo de Raadt
2015-08-20Change httpd(8) to use C99-style fixed-width integers (uintN_t insteadReyk Floeter
2015-08-19spacingReyk Floeter
2015-08-18str_match() checked the return value of str_find_aux() incorrectly: itReyk Floeter
2015-08-03Fix rev 1.70 of server.c by only re-enabling the bufferevent if weFlorian Obser
2015-07-31repair hsts header output, wrong format strings caused brokenSebastian Benoit
2015-07-29backout the previous: it broke wordpress somehow.Reyk Floeter
2015-07-29Read fcgi response records until we have the whole http header and canFlorian Obser
2015-07-28add HSTS to fcgi responsesFlorian Obser
2015-07-23The realm in authenticate directive of config file isn't escaped for '"' char.Sebastien Marie
2015-07-20ensure http_path is escaped before using it in Location redirection.Sebastien Marie
2015-07-19handle error returns from bufferevent_write()Bret Lambert
2015-07-19For the completeness of HSTS, add the non-standard preload option.Reyk Floeter
2015-07-18remove XXX and handle error return from evbuffer_add()Bret Lambert
2015-07-18libtls has been changed to set SSL_MODE_ENABLE_PARTIAL_WRITE andReyk Floeter
2015-07-18treat asprintf failure in REQUEST_URI case as a fatal errorBret Lambert
2015-07-18Fix check against NULL which was reverted by accident in r1.56.Matthias Kilian
2015-07-18tweak previous;Jason McIntyre
2015-07-18Allow to change the default media type globally or per-location,Reyk Floeter
2015-07-18Implement HTTP Strict Transport Security (HSTS).Florian Obser