summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd
AgeCommit message (Expand)Author
2015-06-23various tweaks;Jason McIntyre
2015-06-23escape the matched substrings before using it in expansion.semarie
2015-06-23remove a deprecated character class.semarie
2015-06-23Add initial support for pattern matching using Lua's pattern matching code.Reyk Floeter
2015-06-22After the last change, we also have to url_encode $SERVER_NAME andReyk Floeter
2015-06-21When encoding the Location url, only encode the query and pathReyk Floeter
2015-06-11Use "compliant" header guards by avoiding the reserved '_' namespace.Reyk Floeter
2015-06-09plug fd leak found by Todd MortimerJoerg Jung
2015-06-03Do not assume that asprintf() clears the pointer on failure, whichTodd C. Miller
2015-05-28use "uri"; from yegor timoschenkoJason McIntyre
2015-05-28Do not try to unlink the control socket in an unprivileged childFlorian Obser
2015-05-20Use off_t instead of size_t to pass file size and print it using %lld whenMark Kettenis
2015-05-19better spacing in media types.Igor Sobrado
2015-05-19sort media type extensions for text/html and image/jpeg as given inIgor Sobrado
2015-05-19drop comment about being possible to include /etc/nginx/mime.types,Igor Sobrado
2015-05-05Implement If-Modified-Since.Florian Obser
2015-05-03Implement byte ranges.Florian Obser
2015-04-25Prepend files or directories containing ":" with "./" in directoryFlorian Obser
2015-04-23We cannot log errors with server_close() before allocatingFlorian Obser
2015-04-18Regis Leroy reported that httpd does not strictly accept CRLF forJonathan Gray
2015-04-11Always check the return value of proc_composev_imsg() and handle failuresJoel Sing
2015-04-09Revert previous as this breaks stuff.Florian Obser
2015-04-08Do not silently accept multiple Content-Length headers.Florian Obser
2015-04-01Zero the tls cert/key length variables when inheriting a serverJonathan Gray
2015-03-26pointers to slowcgi(8); from alexei malininJason McIntyre
2015-03-26Allow more characters in CGI environment variables as specified by RFCFlorian Obser
2015-03-15Prevent use after free.Florian Obser
2015-03-11Wrap long line. This is another airplane commit from an 747-8Reyk Floeter
2015-03-09Document the TLSv1.2-only change.Reyk Floeter
2015-03-09Make httpd TLSv1.2-only by default. Some older browsers, like IE 10,Reyk Floeter
2015-03-06Fix minor manpage bug: it is a server, not a relay.Reyk Floeter
2015-02-24Mark up filenames with Pa.Anthony J. Bentley
2015-02-23Use the rewritten (index file appended) uri as DOCUMENT_URI.Christopher Zimmermann
2015-02-23Allow to specify CGI variables as macros in redirection strings, eg.Reyk Floeter
2015-02-23Fix an issues that was found by halex@: we didn't set the return_uriReyk Floeter
2015-02-23Add -O0 to the DEBUG example. Figured out while analysing core dumpsReyk Floeter
2015-02-23Add return_uri to serverconfig_reset() to avoid using garbage from theReyk Floeter
2015-02-19Typo.Florian Obser
2015-02-15Document the tls protocols option.Joel Sing
2015-02-12Rename escape_uri() to url_encode() because it is the opposite ofReyk Floeter
2015-02-12Allow TLS protocols to be specified via a "tls protocols" configurationJoel Sing
2015-02-12Change TLS_PROTOCOLS_DEFAULT to be TLSv1.2 only. Add a TLS_PROTOCOLS_ALLJoel Sing
2015-02-11More http status codes.Florian Obser
2015-02-10Encode directory listings.Florian Obser
2015-02-08Use AI_ADDRCONFIG when resolv hosts on startup.Reyk Floeter
2015-02-08spacingReyk Floeter
2015-02-07spacingReyk Floeter
2015-02-07Remove server_load_file() in favor of tls_load_file(3)Reyk Floeter
2015-02-07double word fix;Jason McIntyre
2015-02-07Document tls dhe and tls ecdhe options.Joel Sing