summaryrefslogtreecommitdiff
path: root/usr.sbin/httpd
AgeCommit message (Expand)Author
2015-11-05pledge(2) for httpd.Florian Obser
2015-10-31revert -r1.42 as it breaks slowcgi and php-fpm setups as reported by jturnerJoerg Jung
2015-10-28Remove a few more NULL-checks before free.mmcc
2015-10-28While I'm in here, drop a NULL-check before free.mmcc
2015-10-26fix PATH_INFO for / requestsJoerg Jung
2015-10-14Two more char -> unsigned char in ctype functions.Reyk Floeter
2015-10-13Plug a leak.Sunil Nimmagadda
2015-10-13Pass unsigned chars to ctype functions.Reyk Floeter
2015-10-08fix an fd leak if socket connection fails; from Carlin BinghamJonathan Gray
2015-10-08fix a typo; from Carlin BinghamJonathan Gray
2015-09-11Fix server_handshake_tls() - we should only call server_input() in the caseJoel Sing
2015-09-10fix return type for tls_read/writeBob Beck
2015-09-10fix after libtls api changesBob Beck
2015-09-10Update httpd to call tls_handshake() after tls_accept_socket().Joel Sing
2015-09-07Fix a regression that was introduced with server.c r1.64: Do NOT freeReyk Floeter
2015-08-21The WebDAV MOVE method was not included in the switch statementReyk Floeter
2015-08-20stdlib.h is in scope; do not cast malloc/calloc/realloc*Theo de Raadt
2015-08-20Change httpd(8) to use C99-style fixed-width integers (uintN_t insteadReyk Floeter
2015-08-19spacingReyk Floeter
2015-08-18str_match() checked the return value of str_find_aux() incorrectly: itReyk Floeter
2015-08-03Fix rev 1.70 of server.c by only re-enabling the bufferevent if weFlorian Obser
2015-07-31repair hsts header output, wrong format strings caused brokenSebastian Benoit
2015-07-29backout the previous: it broke wordpress somehow.Reyk Floeter
2015-07-29Read fcgi response records until we have the whole http header and canFlorian Obser
2015-07-28add HSTS to fcgi responsesFlorian Obser
2015-07-23The realm in authenticate directive of config file isn't escaped for '"' char.Sebastien Marie
2015-07-20ensure http_path is escaped before using it in Location redirection.Sebastien Marie
2015-07-19handle error returns from bufferevent_write()Bret Lambert
2015-07-19For the completeness of HSTS, add the non-standard preload option.Reyk Floeter
2015-07-18remove XXX and handle error return from evbuffer_add()Bret Lambert
2015-07-18libtls has been changed to set SSL_MODE_ENABLE_PARTIAL_WRITE andReyk Floeter
2015-07-18treat asprintf failure in REQUEST_URI case as a fatal errorBret Lambert
2015-07-18Fix check against NULL which was reverted by accident in r1.56.Matthias Kilian
2015-07-18tweak previous;Jason McIntyre
2015-07-18Allow to change the default media type globally or per-location,Reyk Floeter
2015-07-18Implement HTTP Strict Transport Security (HSTS).Florian Obser
2015-07-17Adjust server_file_modified_since() to our style. Please keep httpd clean.Reyk Floeter
2015-07-17According to RFC 3875 PATH_INFO should either contain a full path orReyk Floeter
2015-07-16spacingReyk Floeter
2015-07-16If we can read faster from disk than send data to the client stopFlorian Obser
2015-07-16VIS_QUOTE is not there yet, unbreak the tree. Noticed by semarie@Reyk Floeter
2015-07-15Escape the message in server_log() as well.Reyk Floeter
2015-07-15For some values like the User-Agent, use vis(3) instead of url_encode().Reyk Floeter
2015-07-15Simplify the error path of the previous commit: by using ret = -1 byReyk Floeter
2015-07-15Close connections that fail to complete a TLS handshake.Joel Sing
2015-07-15Unbreak configurations that have a non-TLS listen statement followed by aJoel Sing
2015-07-15Fix typo in comment.Joel Sing
2015-07-15Document default locations for TLS certificate and key.Joel Sing
2015-07-15httpd don't sanitize variables before putting them in logs. It is possible forsemarie
2015-07-15Send the TLS certificate and key via separate imsgs, rather thanJoel Sing
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 10:40:36 +0000