Path to this page:
Subject: CVS commit: pkgsrc/www/bozohttpd
From: matthew green
Date: 2018-11-23 22:30:27
Message id: 20181123213027.3F5E5FB1F@cvs.NetBSD.org
Log Message:
update to bozohttpd 20181123. changes include:
o add url remap support via .bzremap file, from martin@netbsd.org
o handle redirections for any protocol, not just http:
o fix a denial of service attack against header contents, which
is now bounded at 16KiB. reported by JP
o reduce default timeouts, and add expand timeouts to handle the
initial line, each header, and the total time spent
o add -T option to expose new timeout settings
o minor RFC fixes related to timeout handling
o fix special file (.htpasswd, .bz*) bypass. reported by JP.
anyone using .htpasswd files should update ASAP.
Files: