summaryrefslogtreecommitdiffstats
path: root/support/envvars-std.in (unfollow)
Commit message (Collapse)AuthorFilesLines
2020-05-20core, protocol: reject invalid Content-Length ASAP.Yann Ylavic1-1/+12
Don't let invalid invalid Content-Length header go beyond ap_read_request() and protocol validation. The check in ap_http_filter() is still useful if some modules mangles the header, but it's too late for the usual case. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877955 13f79535-47bb-0310-9956-ffa450edef68
2020-05-20core,modules: provide/use ap_parse_strict_length() helper.Yann Ylavic19-129/+118
It helps simplifying a lot of duplicated code based on apr_strtoff(), while also rejecting leading plus/minus signs which are dissalowed in Content-Length and (Content-)Range headers. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877954 13f79535-47bb-0310-9956-ffa450edef68
2020-05-16lognosEric Covener2-2/+2
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877830 13f79535-47bb-0310-9956-ffa450edef68
2020-05-16PR 64365: proxy_fcgi doesn't check expression before unsetting varEric Covener2-6/+20
Submitted By: Michael König <mail ikoenig.net> Committed By: covener git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877829 13f79535-47bb-0310-9956-ffa450edef68
2020-05-16fr doc rebuild.Lucien Gentis3-4/+15
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877820 13f79535-47bb-0310-9956-ffa450edef68
2020-05-16fr doc XML file update.Lucien Gentis1-3/+14
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877819 13f79535-47bb-0310-9956-ffa450edef68
2020-05-15mod_ssl: follow up to r1877397: fix SSL_OP_NO_RENEGOT*I*ATION typo.Yann Ylavic3-8/+8
Should work better now :) git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877795 13f79535-47bb-0310-9956-ffa450edef68
2020-05-15Follow up to r1877785: ap_filter_should_yield() is not NULL safe :pYann Ylavic1-1/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877787 13f79535-47bb-0310-9956-ffa450edef68
2020-05-15ap_filter_output_pending(): test where each filter should yield after running.Yann Ylavic1-2/+3
Since running a filter may pass data next to it, ap_filter_output_pending() should test for ap_filter_should_yield(f->next) after each f call, otherwise it won't take into account new pending data in filters it just walked. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877785 13f79535-47bb-0310-9956-ffa450edef68
2020-05-15 *) mod_http2: Fixed regression that caused connections to close when ↵Stefan Eissing4-2/+11
mod_reqtimeout was configured with a handshake timeout. Fixes gitub issue #196. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877783 13f79535-47bb-0310-9956-ffa450edef68
2020-05-14Include Angle-bracket form to Quoted formSteffen Land1-1/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877740 13f79535-47bb-0310-9956-ffa450edef68
2020-05-14mod_proxy: binary search for ProxyErrorOverride status codes.Yann Ylavic2-10/+47
The list can be rather long, speed up runtime by sorting the status codes in error_override_codes and using binary search from ap_proxy_should_override(). git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877728 13f79535-47bb-0310-9956-ffa450edef68
2020-05-13mention relative path behavior, offline questionEric Covener1-2/+13
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877708 13f79535-47bb-0310-9956-ffa450edef68
2020-05-13mod_proxy_http: follow up to r1877696: reindent.Yann Ylavic1-145/+143
No functional changes. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877697 13f79535-47bb-0310-9956-ffa450edef68
2020-05-13mod_proxy_http: axe ap_proxy_should_override() duplicate checks.Yann Ylavic2-5/+3
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877696 13f79535-47bb-0310-9956-ffa450edef68
2020-05-13mod_proxy_http: follow up to r1877646: send Upgrade header with 101 response.Yann Ylavic1-6/+24
Also, add a comment about why we forward the Upgrade header in non-101 responses provided the protocol matches the upgrade= configuration. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877695 13f79535-47bb-0310-9956-ffa450edef68
2020-05-13Windows : do not include ap_config_auto.h Steffen Land1-0/+2
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877693 13f79535-47bb-0310-9956-ffa450edef68
2020-05-13Windows bits for mod_log_json.dspSteffen Land6-2/+77
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877688 13f79535-47bb-0310-9956-ffa450edef68
2020-05-12mod_proxy_http: handle Upgrade requests and upgraded protocol forwarding.Yann Ylavic8-84/+218
If the request Upgrade header matches the worker upgrade= parameter and the backend switches the protocol, do the tunneling in mod_proxy_http. This allows to keep the protocol to HTTP until the backend really switches the protocol, and apply usual output filters. When configured to forward Upgrade mechanism, we want the backend to be able to announce its Upgrade protocol to the client (e.g. with 426 Upgrade Required response) and thus forward back the Upgrade header that matches the one(s) configured in the worker upgrade= parameter. modules/proxy/mod_proxy.h: modules/proxy/proxy_util.c: ap_proxy_worker_can_upgrade(): added helper to determine whether a proxy worker is configured to forward an Upgrade protocol. include/ap_mmn.h: Bump MMN minor for ap_proxy_worker_can_upgrade(). modules/proxy/mod_proxy.c: set_worker_param(): handle worker parameter upgrade=ANY as upgrade=* (should the "any" protocol scheme be something some day..). modules/proxy/mod_proxy_wstunnel.c: proxy_wstunnel_handler(): use ap_proxy_worker_can_upgrade() to match the Upgrade header. Axe handling of upgrade=NONE, it makes no sense to Upgrade a connection if the client did not ask for it, nor to configure mod_proxy_wstunnel to use a worker with upgrade=NONE by the way. modules/proxy/mod_proxy_http.c: proxy_http_req_t: add fields force10 (force HTTP/1.0) and upgrade (value of the Upgrade header sent by the client if it matches the configuration, NULL otherwise). proxy_http_handler(): use ap_proxy_worker_can_upgrade() to determine whether the request is electable for end to end protocol upgrading and set req->upgrade accordingly. terminate_headers(): handle Connection and Upgrade headers to send to the backend, according to req->force10 and req->upgrade set before. ap_proxy_http_prefetch(): use req->force10 and terminate_headers(). send_continue_body(): added helper to send the body retained for end to end 100-continue handling. ap_proxy_http_process_response(): use ap_proxy_worker_can_upgrade() to match the response Upgrade header and forward it back if it matches the configured one(s). That is for 101 Switching Protocol obviously but also any other status code which is not overidden, at the backend wish. If the protocol is switching, create a proxy tunnel and run it, using the minimal timeout from the client or backend connection. Github: closes #125 git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877646 13f79535-47bb-0310-9956-ffa450edef68
2020-05-12ap_log_pid(): Windown does not implement apr_file_perms_set(), not a failure.Yann Ylavic1-1/+1
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877645 13f79535-47bb-0310-9956-ffa450edef68
2020-05-12mod_md: update duplicated APLOGNOs.Yann Ylavic2-3/+3
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877642 13f79535-47bb-0310-9956-ffa450edef68
2020-05-12listen.c: follow up to r1876865: update APLOGNO.Yann Ylavic2-2/+2
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1877641 13f79535-47bb-0310-9956-ffa450edef68