2020-12-16 21:32:01 by Juraj Lutter | Files touched by this commit (3) |
Log message:
nginx: Update naxsi to 1.3
Changes for naxsi 1.3:
- Fixed regression on FILE_EXT confusion
- Documented id 19 and 20 to rules
|
2020-12-02 11:34:09 by Juraj Lutter | Files touched by this commit (3) |
Log message:
nginx: Update njs module to 0.5.0.
Changelog:
* nginx modules:
*) Feature: introduced global "ngx" object.
The following methods were added:
ngx.log(level, msg)
The following properties were added:
ngx.INFO,
ngx.WARN,
ngx.ERR.
*) Feature: added support for Buffer object where string
is expected.
*) Feature: added Buffer version of existing properties.
The following properties were added:
r.requestBuffer (r.requestBody),
r.responseBuffer (r.responseBody),
r.rawVariables (r.variables),
s.rawVariables (s.variables).
The following events were added in stream module:
upstream (upload),
downstream (download).
*) Improvement: added aliases to existing properties.
The following properties were added:
r.requestText (r.requestBody),
r.responseText (r.responseBody).
*) Improvement: throwing an exception in r.internalRedirect()
for a subrequest.
*) Bugfix: fixed promise r.subrequest() with error_page redirect.
*) Bugfix: fixed promise events handling.
* Core:
*) Feature: added TypeScript definitions for built-in
modules.
Thanks to Jakub Jirutka.
*) Feature: tracking unhandled promise rejection.
*) Feature: added initial iterator support.
Thanks to Artem S. Povalyukhin.
*) Improvement: TypeScript definitions are refactored.
Thanks to Jakub Jirutka.
*) Improvement: added forgotten support for
Object.prototype.valueOf() in Buffer.from().
*) Bugfix: fixed heap-use-after-free in JSON.parse().
*) Bugfix: fixed heap-use-after-free in JSON.stringify().
*) Bugfix: fixed JSON.stringify() for arrays resizable via
getters.
*) Bugfix: fixed heap-buffer-overflow for
RegExp.prototype[Symbol.replace].
*) Bugfix: fixed returned value for Buffer.prototype.write*
functions.
*) Bugfix: fixed querystring.stringify().
Thanks to Artem S. Povalyukhin.
*) Bugfix: fixed the catch handler for
Promise.prototype.finally().
*) Bugfix: fixed querystring.parse().
|
2020-11-25 13:12:21 by Jonathan Perkin | Files touched by this commit (3) |
Log message:
nginx*: Add support for ngx_cache_purge module.
Submitted by Brian Ewell in joyent/pkgsrc#289, minor changes by myself.
|
2020-11-25 12:40:06 by Jonathan Perkin | Files touched by this commit (4) |
Log message:
nginx*: Simplify and de-lint, no functional change.
|
2020-11-06 23:54:17 by Juraj Lutter | Files touched by this commit (3) |
Log message:
nginx: Update LUA module to 0.10.19
|
2020-11-05 10:09:30 by Ryo ONODERA | Files touched by this commit (1814) |
Log message:
*: Recursive revbump from textproc/icu-68.1
|
2020-10-28 21:24:29 by Juraj Lutter | Files touched by this commit (1) |
Log message:
nginx: Bump PKGREVISION after modules upgrade
|
2020-10-28 21:21:34 by Juraj Lutter | Files touched by this commit (2) | |
Log message:
nginx: Update modules
Modules have been updated to the following versions:
- naxsi: 1.2
- lua: 0.10.17
- echo: 0.62
|
2020-10-06 14:04:30 by Nils Ratusznik | Files touched by this commit (3) |
Log message:
Updated naxsi module to version 1.1a.
Upstream changes since 0.56:
1.0:
* Parse body of PATCH requests
* Scientific notation in json
* Log clarification
* Fixed country code when geoip library fail to get geolocation or ip is \
private/local address
* Fixed issues to setup nxapi on ES5 and added country location on stats and \
generated whitelists
1.1:
* Fixed various compilation issues
* Fixed valid JSON blocked by Rule ID 15
* Fixed documentation
* Updated libinjection to 3.9.2
* Added Content-type: application/vnd.api+json
* Added JSON logging output for events
* Implemented Whitelist for IPs and CIDRs and support for IPv4 and IPv6
1.1a:
* Fixed 3 vulnerabilities related to the WAF.
* Fixed build on FreeBSD
|
2020-09-30 15:52:26 by Juraj Lutter | Files touched by this commit (2) |
Log message:
www/nginx: Update njs to 0.4.4
Release Date: 29 September 2020
* nginx modules:
- Bugfix: fixed location merge.
- Bugfix: fixed r.httpVersion for HTTP/2.
* Core:
- Feature: added support for numeric separators (ES12).
- Feature: added remaining methods for %TypedArray%.prototype. The following
methods were added: every(), filter(), find(), findIndex(), forEach(),
includes(), indexOf(), lastIndexOf(), map(), reduce(), reduceRight(),
reverse(), some().
- Feature: added %TypedArray% remaining methods. The following methods were \
added: from(), of().
- Feature: added DataView object.
- Feature: added Buffer object implementation.
- Feature: added support for ArrayBuffer in TextDecoder.prototype.decode()
- Feature: added support for Buffer object in crypto methods.
- Feature: added support for Buffer object in fs methods.
- Change: Hash.prototype.digest() and Hmac.prototype.digest() now return a
Buffer instance instead of a byte string when encoding is not provided.
- Change: fs.readFile() and friends now return a Buffer instance instead of a
byte string when encoding is not provided.
- Bugfix: fixed function prototype property handler while setting.
- Bugfix: fixed function constructor property handler while setting.
- Bugfix: fixed String.prototype.indexOf() for byte strings.
- Bugfix: fixed RegExpBuiltinExec() with a global flag and byte strings.
- Bugfix: fixed RegExp.prototype[Symbol.replace] the when replacement value is a
function.
- Bugfix: fixed TextDecoder.prototype.decode() with non-zero TypedArray offset.
|