lighttpd
/
lighttpd1.4
2
0
Fork 0
Code Issues Releases Wiki Activity
3,408 Commits 9 Branches 87 Tags 16 MiB
Commit Graph

19 Commits

Author SHA1 Message Date
Glenn Strauss 1cf68f79eb [core] behavior change: stricter URL normalization 
behavior change: stricter URL normalization

Prior behavior can be obtained by configuring lighttpd.conf with:
      server.http-parseopts = (“url-normalize” => “disable” )
although this is not recommended.

This behavior change was pre-announced with the releases of
  lighttpd 1.4.52 (2018.11.28)
  lighttpd 1.4.53 (2019.01.27)

The recommended settings are:
      server.http-parseopts = (
        "header-strict"            => "enable",
        "host-strict"              => "enable",
        "host-normalize"           => "enable",
        "url-normalize"            => "enable",
        "url-normalize-unreserved" => "enable",
        "url-normalize-required"   => "enable",
        "url-ctrls-reject"         => "enable",
        "url-path-2f-decode"       => "enable",
        "url-path-backslash-trans" => "enable",
        "url-path-dotseg-remove"   => "enable",
        "url-query-20-plus"        => "enable"
      )

The lighttpd defaults with this commit are slightly less strict:
      server.http-parseopts = (
        "header-strict"            => "enable",
        "host-strict"              => "enable",
        "host-normalize"           => "enable",
        "url-normalize"            => "enable",
        "url-normalize-unreserved" => "enable",
       #"url-normalize-required"   => "enable",
        "url-ctrls-reject"         => "enable",
        "url-path-2f-decode"       => "enable",
       #"url-path-backslash-trans" => "enable",
        "url-path-dotseg-remove"   => "enable",
       #"url-query-20-plus"        => "enable"
      )
 2019-05-04 17:48:04 -04:00
Glenn Strauss a1077d18cb [tests] more test config cleanup 2018-12-18 00:08:46 -05:00
Glenn Strauss 07517ff30a [tests] some test config cleanup 
including limiting use of php in tests to mod-fastcgi.t
 2018-12-10 22:36:23 -05:00
Stefan Bühler 87c5ec9651 [tests] search for perl in PATH instead of /usr/bin; whitespace + test config cleanups 
From: Stefan Bühler <stbuehler@web.de>

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@3019 152afb58-edef-0310-8abb-c4023f1b3aa9
 2015-08-22 20:51:08 +00:00
Cyril Brulebois 4f4bcdd3c3 tests: make sure mod_proxy doesn't leave running processes (fixes #2435, thx kibi) 
In case the proxy instance goes wrong, the clean-up doesn't kill the
real instance. So close both instances explicitly in the clean-up
phase.

Signed-off-by: Cyril Brulebois <kibi@debian.org>

git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2857 152afb58-edef-0310-8abb-c4023f1b3aa9
 2012-11-09 14:23:25 +00:00
Stefan Bühler 36f74e5d23 Revert url decoding+simplifying before matching of mod_rewrite/mod_redirect 
- Lot of regressions (we forgot to reencode the result)
  - Generic problem: after decode and rewrite "a?b?c": which '?' was the path?query seperator?
  - Possible solution: only decode printable characters (without '?'), and encode the result; do not encode the '%' of a not decoded character.
  - Still a problem with path simplifying, it seems many people use urls like this: http://server1/http%3a//server2/xxx
    and rewrite the path into the querystring.
  - Probably only usable with an extra config option

  => Do NOT use rewrite/redirect to protect specific urls.


git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2362 152afb58-edef-0310-8abb-c4023f1b3aa9
 2008-12-07 15:22:42 +00:00
Stefan Bühler cbd40dc44b [tests] Remove pidfile from test system 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2242 152afb58-edef-0310-8abb-c4023f1b3aa9
 2008-07-29 21:22:13 +00:00
Stefan Bühler 8b28023c85 Fix mod-proxy.t to run outside of the srcdir 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2094 152afb58-edef-0310-8abb-c4023f1b3aa9
 2008-02-26 19:13:55 +00:00
Elan Ruusamäe c65ad47a55 - change s/// separator that it doesn't confuse vim 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.4.x@2027 152afb58-edef-0310-8abb-c4023f1b3aa9
 2008-01-15 22:03:59 +00:00
Jan Kneschke bab099bca6 updated test as we don't overwrite the Server-Header anymore 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@865 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-11-18 13:27:47 +00:00
Jan Kneschke 3ebc17571a find perl at runtime 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@670 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-09-01 11:44:57 +00:00
Jan Kneschke 7988661090 added tests for keep-alive and setenv and passed a ARRAY ref instead of a HASH ref 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@654 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-08-31 12:55:44 +00:00
Jan Kneschke 15b0109071 run tests in build root (merged #228) 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@640 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-08-29 12:08:00 +00:00
Jan Kneschke 426880f0a2 removed warnings on empty response-body, added debug output to mod_proxy 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-merge-1.4.x@559 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-08-17 09:52:16 +00:00
Jan Kneschke a2373e71a9 added a test for the 'don't pass Server from the backend server' 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@412 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-06-28 17:25:35 +00:00
Jan Kneschke 877161c067 switch to LigtyTest module 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@394 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-06-26 10:27:41 +00:00
Jan Kneschke 7a25f1b5f5 Unified all tests to use the LighyTest framework 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@388 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-06-15 09:37:18 +00:00
Jan Kneschke f090899eae improved debug output 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@377 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-06-12 09:17:04 +00:00
Jan Kneschke cee3c0d880 added tests for mod-proxy 
git-svn-id: svn://svn.lighttpd.net/lighttpd/branches/lighttpd-1.3.x@351 152afb58-edef-0310-8abb-c4023f1b3aa9
 2005-05-10 18:48:59 +00:00