Joe Orton e03580554f Explicitly reject CGI output which includes a Transfer-Encoding ...

header, rather than drop it and send what's likely to be an unexpected
or corrupted response.

* modules/generators/cgi_common.h (cgi_handle_response): Send a 502
  error if Transfer-Encoding is present in the response headers.

PR: 68970
Github: closes #444


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1917835 13f79535-47bb-0310-9956-ffa450edef68

2024-05-20 09:18:10 +00:00

..

ab-source-address.txt

Add an option to specify a source address.

2023-11-22 17:19:49 +00:00

alias-preserve-path.txt

mod_alias: Add AliasPreservePath directive to map the full

2023-07-17 15:25:13 +00:00

apxs-i-wo-n.txt

apxs: Fix -i for some cases where -n is not used.

2023-07-07 07:57:35 +00:00

dav-browsermatch.txt

Fix BrowserMatch for gvfs.

2024-03-18 08:18:11 +00:00

davlockdbtype.txt

mod_dav_fs: add DAVLockDBType directive.

2023-10-03 12:58:16 +00:00

flushing-chunks.txt

* modules/http/chunk_filter.c (ap_http_chunk_filter): For a brigade

2023-12-20 15:56:15 +00:00

h2_cleanup.txt

* mod_http2: improved early cleanup of streams.

2023-10-16 08:57:51 +00:00

h2_date_and_bucket_leak.txt

*) mod_http2: v2.0.26 with the following fixes:

2024-01-17 08:38:02 +00:00

h2_early_hints_and_fixes.txt

*) mod_http2: v2.0.15 with the following fixes and improvements

2023-05-12 11:28:59 +00:00

h2_flush_fix.txt

*) mod_http2: fixed a bug in flushing pending data on an already closed

2023-06-09 15:02:21 +00:00

h2_pr66646.txt

*) mod_http2: fixed a bug that could lead to a crash in main connection

2023-06-13 14:36:43 +00:00

h2_proxy_errors.txt

*) mod_proxy_http2: improved error handling on connection errors while

2023-08-28 13:27:10 +00:00

h2_proxy_forwarded_host.txt

*) mod_proxy_http2: fix X-Forward-Host header to carry the correct value.

2023-09-08 07:39:50 +00:00

h2_proxyrequests.txt

*) mod_http2: new directive H2ProxyRequests on|off to enable handling

2023-06-28 11:22:49 +00:00

h2_stream_timeout.txt

* mod_http2: fixed a bug in handling of stream timeouts.

2023-09-18 07:55:16 +00:00

h2_v2.0.18.txt

* mod_proxy_http2: fixed using the wrong "bucket_alloc" from the backend

2023-06-01 10:38:53 +00:00

h2_websockets.txt

*) mod_http2: added support for bootstrapping WebSockets via HTTP/2, as

2023-06-20 12:01:09 +00:00

ldap_status.txt

mod_ldap: HTML-escape ldap-status handler.

2023-11-16 19:53:18 +00:00

ldap-optimise.txt

Optimise handling LDAP authorization where LDAP was not used

2023-11-23 10:22:58 +00:00

linux-log-tid.txt

On Linux use the real thread id via gettid() in error logging,

2024-05-08 12:46:58 +00:00

md_2.4.26.txt

mod_md: update to v2.4.26

2024-04-08 11:24:18 +00:00

md_v2.4.23.txt

* mod_md:

2023-07-14 12:26:50 +00:00

md_v2.4.24.txt

* mod_md: fixed passing of the server environment variables to programs

2023-08-16 11:40:21 +00:00

md_v2.4.25.txt

* mod_md: Fix the reported "until" validity of a certificate in the status

2023-10-31 10:24:11 +00:00

mod_headers-edit_all.txt

mod_headers: Avoid infinite recursion with the edit* action and empty matches.

2024-01-16 17:40:36 +00:00

mod_slotmem_shm.txt

Add missing changes-entries.

2024-02-14 13:36:58 +00:00

mod_tls_v0.9.0.txt

* mod_tls: update version of rustls-ffi to v0.13.0.

2024-04-22 13:55:22 +00:00

openssl3.txt

Follow up to r1908537: CHANGES entry.

2023-11-16 11:44:31 +00:00

pr65091.txt

* support/htcacheclean.c (list_urls): Continue rather than stopping

2024-02-01 08:39:48 +00:00

pr66571.txt

* Add server directory to include path as mod_rewrite requires test_char.h.

2023-04-19 10:39:19 +00:00

pr66580.txt

* In the reverse proxy case when we only want to keep encoded slashes untouched

2023-04-28 06:20:27 +00:00

pr66597.txt

*) mod_http2: avoid double chunked-encoding on internal redirects.

2023-05-19 12:17:44 +00:00

pr66672.txt

PR66672: rewrite QSA+trailing ? regression

2023-06-27 14:33:50 +00:00

pr66801.txt

*) mod_http2: Fix reporting of Total Accesses in server-status to not count

2023-07-26 12:18:06 +00:00

pr68080.txt

Follow up to r1913815: credit Joe in CHANGES too.

2023-11-15 22:24:28 +00:00

pr68863.txt

* Ensure that we set the default DH parameters for the key

2024-04-08 13:18:28 +00:00

pr68970.txt

Explicitly reject CGI output which includes a Transfer-Encoding

2024-05-20 09:18:10 +00:00

proxy_backend_dns_ttl.txt

* Document r1912459. [skip ci]

2023-10-30 10:44:59 +00:00

proxy_http2_retries.txt

*) mod_proxy_http2: fix retry handling to not leak temporary errors.

2023-05-22 14:10:17 +00:00

resp_passed.txt

*) core: add final_resp_passed flag to request_rec to allow

2023-06-01 12:21:03 +00:00

ssl-providers.txt

mod_ssl: Add support for loading keys from OpenSSL 3.x providers via

2023-12-05 15:26:22 +00:00

start-threads.txt

shutdown carefully when threads don't start

2024-03-13 01:26:54 +00:00

systemd-selinux.patch

mod_systemd: if SELinux is available and enabled, log the SELinux

2024-03-15 15:26:11 +00:00

tls-rustls-update.txt

*) mod_tls: updating to rustls-ffi version 0.9.2 or higher.

2023-05-02 08:36:02 +00:00

worker_exit.txt

mpm_worker: Fix AH00045 about children processes not terminating timely.

2024-04-12 11:02:31 +00:00

xmlchar.txt

mod_xml2enc: remove dependency on xmlstring header

2023-11-21 12:58:47 +00:00