lighty labs

2018-09-07

14:01 Lighttpd Support: RE: HTTP referer validation

I was able to set it via the conf file response-header.
"Referrer-Policy" => "no-referrer"... danzimal

13:47 Lighttpd Support: RE: HTTP referer validation

Understood!
How about changing the default from no-referrer-when-downgrade to simply *no-referer*?... danzimal

2018-09-06

21:56 Lighttpd Support: HTTP referer validation

We have lighttpd server installations for which the $HTTP["referer"] should always be sourced from the $HTTP["host"].... danzimal

2018-04-30

15:16 Lighttpd Support: [Solved] Server returns 0 bytes for large requests

I have a page with large content which takes longer than a minute to load.
I can reduce the content and the server w... danzimal

2016-12-20

22:44 Lighttpd Support: CSRF vulnerabilities

Hi;
As I understand that one defensive measure against CSRF is to validate the 'origin' and 'referer' request head... danzimal

2014-05-22

01:41 Lighttpd Support: RE: PUT/DELETE requests are showing as POST request_methods.

Well, as it turns out, I guess I was on the wrong path (mod_webdav).
After more digging, I discovered the followin... danzimal

00:35 Lighttpd Support: PUT/DELETE requests are showing as POST request_methods.

I'm stuck here. I'm developing a RESTful API and using curl such as;
curl -PUT -d "id=2" 10.10.10.1/some/resource
c... danzimal

2013-02-12

20:50 Lighttpd Support: RE: Can I link openssl static archives?

As I previously stated, I don't currently have a shared object file, they are all archives.
I am indeed looking into... danzimal

16:57 Lighttpd Support: RE: Can I link openssl static archives?

Btw, this is a Linux distribution for which the openssl package is already separated into archive files and linked in... danzimal

16:39 Lighttpd Support: Can I link openssl static archives?

--with-openssl --with-openssl-libs=/usr/lib
Instead of linking the shared object file (libssl.so), is it possibl... danzimal