William A. Rowe Jr 4992fc660a SECURITY: CVE-2013-5704 (cve.mitre.org) ...

core: HTTP trailers could be used to replace HTTP headers
late during request processing, potentially undoing or
otherwise confusing modules that examined or modified
request headers earlier.  Adds "MergeTrailers" directive to restore
legacy behavior.

Submitted by: Edward Lu, Yann Ylavic, Joe Orton, Eric Covener
Backports: r1610814
Reviewed by: covener, wrowe, ylavic



git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1619884 13f79535-47bb-0310-9956-ffa450edef68

2014-08-22 18:18:08 +00:00

..

balancers

* easy proposals to synch 2.4.x and trunk

2013-12-26 18:08:28 +00:00

examples

Backport r1209766, r1210252, r1210284:

2011-12-05 00:08:01 +00:00

.indent.pro

Add some more apr_ types

2002-01-29 15:27:30 +00:00

ajp_header.c

Merge r1610207 from trunk:

2014-07-14 06:05:22 +00:00

ajp_header.h

Merge r1610207 from trunk:

2014-07-14 06:05:22 +00:00

ajp_link.c

Backport r1209766, r1210252, r1210284:

2011-12-05 00:08:01 +00:00

ajp_msg.c

Merge r1373898 from trunk:

2012-09-26 14:24:37 +00:00

ajp_utils.c

drop a stray 8-bit char at end of line in comment (was r1498199 in trunk)

2013-07-10 20:26:29 +00:00

ajp.h

Doxygen fix (r1514987 in trunk)

2013-08-25 08:24:22 +00:00

CHANGES

Change common but incorrect usage of 'depreciated'

2007-02-08 13:46:14 +00:00

config.m4

Merge r1452911, r1452949, r1452954, r1453022, r1453574, r1453875, r1453876, r1453963, r1454386, r1454414, r1454415, r1458285, r1458447 from trunk:

2013-06-13 15:09:31 +00:00

libproxy.exp

Initial revision

1999-06-18 18:39:23 +00:00

Makefile.in

Treat proxy/balancers normally and independently...

2008-12-12 16:31:15 +00:00

mod_proxy_ajp.c

Merge r1542562 from trunk:

2014-02-17 21:29:15 +00:00

mod_proxy_ajp.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_proxy_balancer.c

Merge r1572905, r1595305, r1597182, r1586827, r1534892, r1563193, r1597639 from trunk:

2014-06-17 12:06:05 +00:00

mod_proxy_balancer.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_proxy_connect.c

modules: Fix some compiler warnings.

2013-09-14 14:44:23 +00:00

mod_proxy_connect.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_proxy_express.c

No need for multi-version compatibility.

2012-02-01 11:13:12 +00:00

mod_proxy_express.dsp

Added forgfotten .dsp bits - my bad.

2011-07-18 22:31:04 +00:00

mod_proxy_fcgi.c

Merge r1592037 from trunk:

2014-06-26 00:24:44 +00:00

mod_proxy_fcgi.dsp

merge r1544381 from trunk: no more fcgi_protocol.h

2013-11-22 00:19:06 +00:00

mod_proxy_fdpass.c

Backport r1209766, r1210252, r1210284:

2011-12-05 00:08:01 +00:00

mod_proxy_fdpass.h

* modules/: More doxy group fixes.

2012-01-31 12:04:47 +00:00

mod_proxy_ftp.c

Merge r1551714 from trunk:

2014-01-05 16:15:38 +00:00

mod_proxy_ftp.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_proxy_http.c

SECURITY: CVE-2013-5704 (cve.mitre.org)

2014-08-22 18:18:08 +00:00

mod_proxy_http.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_proxy_scgi.c

Merge r1546730, r1583008, r1571369, r1552130, r1578760, r1592615, r1592632, r1595321, r1550302, r1550307, r1585435 from trunk:

2014-06-03 12:14:22 +00:00

mod_proxy_scgi.dsp

Add mod_proxy_scgi; PR 48303; Submitted by: Gregg L. Smith <lists glewis.com>

2009-12-01 02:24:31 +00:00

mod_proxy_wstunnel.c

Merge r1594625 from trunk:

2014-05-30 13:49:29 +00:00

mod_proxy_wstunnel.dsp

Merge r1452911, r1452949, r1452954, r1453022, r1453574, r1453875, r1453876, r1453963, r1454386, r1454414, r1454415, r1458285, r1458447 from trunk:

2013-06-13 15:09:31 +00:00

mod_proxy.c

Merge r1573626 from trunk:

2014-06-21 13:47:30 +00:00

mod_proxy.dsp

Embed the .manifest files of all httpd binaries as a post-build

2007-01-11 05:37:20 +00:00

mod_proxy.h

Merge r1592511, r1592514 from trunk:

2014-05-30 13:51:39 +00:00

NWGNUmakefile

Merge r1452911, r1452949, r1452954, r1453022, r1453574, r1453875, r1453876, r1453963, r1454386, r1454414, r1454415, r1458285, r1458447 from trunk:

2013-06-13 15:09:31 +00:00

NWGNUproxy

Added missing proxy export symbols.

2014-03-10 00:48:47 +00:00

NWGNUproxyajp

Fixed NetWare build for proxy modules.

2011-04-03 15:33:08 +00:00

NWGNUproxybalancer

Fixed NetWare build for proxy modules.

2011-04-03 15:33:08 +00:00

NWGNUproxycon

Fixed NetWare build for proxy modules.

2011-04-03 15:33:08 +00:00

NWGNUproxyexpress

Added new proxy modules to NetWare build.

2011-07-20 12:44:09 +00:00

NWGNUproxyfcgi

Fixed NetWare build for proxy modules.

2011-04-03 15:33:08 +00:00

NWGNUproxyftp

Fixed NetWare build for proxy modules.

2011-04-03 15:33:08 +00:00

NWGNUproxyhtp

Fixed NetWare build for proxy modules.

2011-04-03 15:33:08 +00:00

NWGNUproxylbm_busy

NetWare build tweaks.

2012-08-09 11:15:45 +00:00

NWGNUproxylbm_hb

NetWare build tweaks.

2012-08-09 11:15:45 +00:00

NWGNUproxylbm_req

NetWare build tweaks.

2012-08-09 11:15:45 +00:00

NWGNUproxylbm_traf

NetWare build tweaks.

2012-08-09 11:15:45 +00:00

NWGNUproxyscgi

Fixed NetWare build for proxy modules.

2011-04-03 15:33:08 +00:00

NWGNUproxywstunnel

Merge r1452911, r1452949, r1452954, r1453022, r1453574, r1453875, r1453876, r1453963, r1454386, r1454414, r1454415, r1458285, r1458447 from trunk:

2013-06-13 15:09:31 +00:00

proxy_util.c

mod_proxy Connection handling crasher, CVE-2014-0117

2014-07-15 16:11:04 +00:00

proxy_util.h

* headers: Move *_DECLARE_* macros to beginning of line in headers.

2012-09-24 09:49:55 +00:00

scgi.h

Hmmm... wasn't added w/ the patch :/

2014-06-03 12:54:00 +00:00