summaryrefslogtreecommitdiff
path: root/libexec
diff options
context:
space:
mode:
authorpgoyette <pgoyette@NetBSD.org>2019-01-27 02:08:33 +0000
committerpgoyette <pgoyette@NetBSD.org>2019-01-27 02:08:33 +0000
commitcc17ee2ece085d7d746bcd8fa9be19170855aaac (patch)
tree5be40613f405cb081b2c44410b1506781927f8e3 /libexec
parent10dd4cc92542aa04b0e59469a484a48e4c3cdd24 (diff)
Merge the [pgoyette-compat] branch
Diffstat (limited to 'libexec')
-rw-r--r--libexec/httpd/CHANGES35
1 files changed, 34 insertions, 1 deletions
diff --git a/libexec/httpd/CHANGES b/libexec/httpd/CHANGES
index b8cf9e968b9..7cef328257a 100644
--- a/libexec/httpd/CHANGES
+++ b/libexec/httpd/CHANGES
@@ -1,4 +1,37 @@
-$NetBSD: CHANGES,v 1.37 2019/01/22 05:32:57 mrg Exp $
+$NetBSD: CHANGES,v 1.38 2019/01/27 02:08:36 pgoyette Exp $
+
+changes in bozohttpd 20190121:
+ o don't display special files in the directory index. they aren't
+ served, but links to them are generated.
+
+changes in bozohttpd 20190116:
+ o fix CGI '+' parameter handling, some error checking, and a double
+ free. from rajeev_v_pillai@yahoo.com
+ o more directory indexing clean up. from rajeev_v_pillai@yahoo.com
+
+changes in bozohttpd 20181215:
+ o fix .htpasswd bypass for authenticated users. reported by JP,
+ from leot@netbsd.org
+ o avoid possible null dereference when receiving a big request that
+ timeout. reported by maya@netbsd.org, from leot@netbsd.org
+ o fix handling of -T option, from leot@netbsd.org
+ o cleanups and portability improvements, from maya@netbsd.org
+ o change directory indexing to use html tables, from
+ rajeev_v_pillai@yahoo.com
+
+changes in bozohttpd 20181125:
+ o fixes for option parsing introduced in bozohttpd 20181123
+
+changes in bozohttpd 20181121:
+ o add url remap support via .bzremap file, from martin@netbsd.org
+ o handle redirections for any protocol, not just http:
+ o fix a denial of service attack against header contents, which
+ is now bounded at 16KiB. reported by JP
+ o reduce default timeouts, and add expand timeouts to handle the
+ initial line, each header, and the total time spent
+ o add -T option to expose new timeout settings
+ o minor RFC fixes related to timeout handling
+ o fix special file (.htpasswd, .bz*) bypass. reported by JP
changes in bozohttpd 20190121:
o don't display special files in the directory index. they aren't