lighty labs

2018-09-08

21:12 Lighttpd2 Revision bda1a90f: [core] add strict.post_content_length option

Change-Id: Ie9d67eceed7e957b667554925d562018a3217209

2018-09-07

05:21 Lighttpd Support: RE: HTTP referer validation

Some (browser) privacy extensions disable the @Referer@ header completely, not just for foreign domains, so please do...

2018-08-26

16:52 Lighttpd Revision e0260a41: [buffer] fix duplicate assert and comment

this originates from ad3e93ea9 for no apparent reason

16:52 Lighttpd Revision 3be07078: [core] replace folding whitespace with a single space

- previously the leading whitespace from folded lines was kept
- also ignore lines without any data

16:44 Lighttpd Revision df8e4f95: [core,security] process headers after combining folded headers

- this fixes various use-after-free scenarios (reported by Or Peles of
VDOO): when parse_single_header stores point...

2018-08-25

11:13 Lighttpd Revision a2cc330f: [core] header parsing: use goto for error handling

- disable keep-alive for all failures
- default to 400 for status

10:43 Lighttpd Revision 725d9512: [core] explicitly return 0 instead of constant result

10:35 Lighttpd Revision ed0054c2: [core] split parsing header line into separate function

2018-08-18

12:45 Lighttpd Bug #2902: mod_proxy's “proxy.forwarded” option seems ignored when used with mod_auth.

See https://git.lighttpd.net/lighttpd/lighttpd1.4.git/commit/?h=personal/stbuehler/1.4.48-mod-proxy-fix for a fix for...

12:44 Lighttpd Feature #2903 (Patch Pending): gw backend redesign

I'm not happy about the API; mod_proxy casts a pointer to its own @plugin_data@ as @gw_plugin_data@ to @gw_check_exte...