Skip to content
This repository

Feb 11, 2013

  1. lhft

    Some formatting applied

    authored February 11, 2013

Feb 06, 2013

  1. Bob Ippolito

    update CHANGES, tag v2.4.2

    authored February 05, 2013
  2. Bob Ippolito

    Merge pull request #100 from shkumagai/feature/fix-mochiweb_response-…

    …regression
    
    fix mochiweb_response regression
    authored February 05, 2013
  3. Shoji KUMAGAI

    fix mochiweb_response regression

    authored February 06, 2013

Jan 30, 2013

  1. Bob Ippolito

    tag v2.4.1

    authored January 30, 2013

Jan 27, 2013

  1. lhft

    Fixed the final notes

    authored January 27, 2013

Jan 26, 2013

  1. Bob Ippolito

    fix mochiweb_request regression #97

    authored January 25, 2013

Jan 25, 2013

  1. lhft

    Working on improvements suggested by doubleyou

    authored January 25, 2013

Jan 24, 2013

  1. Bob Ippolito

    #96 - mochifmt_records regression

    authored January 24, 2013

Jan 23, 2013

  1. Bob Ippolito

    update CHANGES and bump vsn to 2.4.0

    authored January 23, 2013
  2. Bob Ippolito

    Merge pull request #95 from vinoski/drop-param-mods

    use tuple modules instead of parameterized modules
    authored January 23, 2013
  3. Steve Vinoski

    use tuple modules instead of parameterized modules

    Erlang R16, coming soon, will do away with parameterized modules (see Issue
    4 under http://www.erlang.org/news/35 for details). Change Mochiweb to use
    tuple modules instead, since they will continue to be supported in R16 and
    beyond. These changes are backward compatible, so current Mochiweb
    applications should require only recompilation to continue working.
    authored January 22, 2013

Jan 11, 2013

  1. lhft

    There is only one place to put user or any kind of data now. I don't …

    …really understan the security implications of this. There is no term_to_binary in the code now.
    authored January 11, 2013
  2. lhft

    Still workin on Dymitri's suggestions

    authored January 11, 2013

Jan 10, 2013

  1. lhft

    Working on Dymitri

    authored January 10, 2013

Jan 08, 2013

  1. lhft

    Mochiweb session it's functional now

    authored January 08, 2013

Jan 07, 2013

  1. lhft

    Trying new encoding ways

    authored January 07, 2013

Jan 04, 2013

  1. lhft

    Added some tests. still getting errors though

    authored January 04, 2013

Jan 02, 2013

  1. lhft

    Added session module for use of secure cookies

    authored January 02, 2013

Dec 15, 2012

  1. Bob Ippolito

    prep changelog for 2.4.0

    authored December 15, 2012
  2. Bob Ippolito

    Merge pull request #91 from djnym/R15B02_mochiweb_acceptor_crash

    Fix for mochiweb_acceptor crash under R15B02
    authored December 15, 2012
  3. Bob Ippolito

    Merge pull request #93 from melkote/master

    Pull request for issue 92: Do not allow backslashes in path (windows security).
    authored December 15, 2012

Dec 14, 2012

  1. Sriram Melkote

    Merge branch 'master' of git://github.com/melkote/mochiweb

    authored December 15, 2012
  2. Sriram Melkote

    Issue 92: Do not allow backslashes in path (security).

    On Windows, it is possible to access arbitrary files by crafting
    a GET with unescaped \, like GET /..\..\..\..\..\windows\win.ini
    
    Please also see ouchbase.com/issues/browse/MB-7390
    authored December 15, 2012
  3. Sriram Melkote

    Do not allow backslashes in path (security).

    On Windows, it is possible to access arbitrary files by crafting
    a GET with unescaped \, like GET /..\..\..\..\..\windows\win.ini
    
    http://www.couchbase.com/issues/browse/MB-7390
    authored December 15, 2012

Dec 13, 2012

  1. Fix for mochiweb_acceptor crash under R15B02

    The source is still unclear but R15B02 now will return and emsgsize error
    if the received packet is larger than the recvbuf.  This can be tested with
    the following (sorry I don't know how to integrate this sort of test into
    mochiweb's tests).
    
    -module(mochi_test).
    
    -export([start/0,
             handle_http/1,
             test/1]).
    
    start() ->
      application:start (inets),
      mochiweb_http:start([{port, 5678}, {loop, fun(Req) -> handle_http(Req) end}]).
    
    handle_http(Req) ->
      Req:respond({ 200,
                    [ {"Content-Type", "text/html"} ],
                    [ "<html><body>Hello</body></html>" ]
                  }).
    
    test (Len) ->
      httpc:request (get, {"http://127.0.0.1:5678/",
                     [{"X-Random", [$a || _ <- lists:seq(1,Len)]}]}, [], []).
    
    Once compiled you can run this with
    
    erl -pa ebin -boot start_sasl
    
    Then run with
    
    mochi_test:start().
    mochi_test:test(10000).
    
    The result is different with R14B04 and R15B02.  With R15B02 there was
    a crash in the mochiweb_acceptor.  This patch deals with that crash.
    authored December 13, 2012

Nov 19, 2012

  1. Prashanth Mundkur

    Merge branch 'mochiweb' into fix-zero-length-range-response

    authored November 19, 2012

Nov 06, 2012

  1. Dmitry Demeshchuk

    Merge pull request #88 from doubleyou/handling-combined-header

    Handling combined header
    authored November 06, 2012
  2. Dmitry Demeshchuk

    Removed export_all

    authored November 06, 2012
  3. Dmitry Demeshchuk

    Avoid using regular expressions

    authored November 06, 2012
  4. Prashanth Mundkur

    Fix 0-length range responses.

    There were two issues:
    
    - file:pread() returns eof in the case when the length of the
      read is 0 bytes, for any offset.  This causes badarg exceptions
      later in iolist_size when the 'eof' atom is encountered instead
      of a binary
    
    - The range-length computation is off by 1 for 0-length ranges:
      {Skip, Skip + Length - 1, PartialBody} would result in e.g.
      {0, -1, eof}. {0, -1} is invalid HTTP according to
    
      http://tools.ietf.org/html/rfc2616#section-14.16
    
         A byte-content-range-spec with a byte-range-resp-spec whose
         last-byte-pos value is less than its first-byte-pos value,
         or whose instance-length value is less than or equal to its
         last-byte-pos value, is invalid.
    
    This patch fixes both issues.
    authored November 05, 2012

Oct 18, 2012

  1. kmwang

    support parsing quoted string.

    authored October 18, 2012

Oct 15, 2012

  1. kmwang

    amended get_combined_value.

    authored October 15, 2012

Oct 12, 2012

  1. Bob Ippolito

    Merge pull request #85 from pmundkur/fix-ranges

    Fix a case in handling range headers
    authored October 12, 2012

Oct 09, 2012

  1. kmwang

    add ability to handle combined content-length header.

    authored October 09, 2012
Something went wrong with that request. Please try again.