Permalink
Commits on Dec 15, 2012
  1. prep changelog for 2.4.0

    etrepum committed Dec 15, 2012
  2. Merge pull request #91 from djnym/R15B02_mochiweb_acceptor_crash

    etrepum committed Dec 15, 2012
    Fix for mochiweb_acceptor crash under R15B02
  3. Merge pull request #93 from melkote/master

    etrepum committed Dec 15, 2012
    Pull request for issue 92: Do not allow backslashes in path (windows security).
Commits on Dec 14, 2012
  1. Issue 92: Do not allow backslashes in path (security).

    melkote committed Dec 14, 2012
    On Windows, it is possible to access arbitrary files by crafting
    a GET with unescaped \, like GET /..\..\..\..\..\windows\win.ini
    
    Please also see ouchbase.com/issues/browse/MB-7390
  2. Do not allow backslashes in path (security).

    melkote committed Dec 14, 2012
    On Windows, it is possible to access arbitrary files by crafting
    a GET with unescaped \, like GET /..\..\..\..\..\windows\win.ini
    
    http://www.couchbase.com/issues/browse/MB-7390
Commits on Dec 13, 2012
  1. Fix for mochiweb_acceptor crash under R15B02

    djnym committed Dec 13, 2012
    The source is still unclear but R15B02 now will return and emsgsize error
    if the received packet is larger than the recvbuf.  This can be tested with
    the following (sorry I don't know how to integrate this sort of test into
    mochiweb's tests).
    
    -module(mochi_test).
    
    -export([start/0,
             handle_http/1,
             test/1]).
    
    start() ->
      application:start (inets),
      mochiweb_http:start([{port, 5678}, {loop, fun(Req) -> handle_http(Req) end}]).
    
    handle_http(Req) ->
      Req:respond({ 200,
                    [ {"Content-Type", "text/html"} ],
                    [ "<html><body>Hello</body></html>" ]
                  }).
    
    test (Len) ->
      httpc:request (get, {"http://127.0.0.1:5678/",
                     [{"X-Random", [$a || _ <- lists:seq(1,Len)]}]}, [], []).
    
    Once compiled you can run this with
    
    erl -pa ebin -boot start_sasl
    
    Then run with
    
    mochi_test:start().
    mochi_test:test(10000).
    
    The result is different with R14B04 and R15B02.  With R15B02 there was
    a crash in the mochiweb_acceptor.  This patch deals with that crash.
Commits on Nov 6, 2012
  1. Merge pull request #88 from doubleyou/handling-combined-header

    doubleyou committed Nov 6, 2012
    Handling combined header
  2. Removed export_all

    doubleyou committed Nov 6, 2012
Commits on Oct 18, 2012
  1. support parsing quoted string.

    kmwang committed Oct 18, 2012
Commits on Oct 15, 2012
  1. amended get_combined_value.

    kmwang committed Oct 15, 2012
Commits on Oct 12, 2012
  1. Merge pull request #85 from pmundkur/fix-ranges

    etrepum committed Oct 12, 2012
    Fix a case in handling range headers
Commits on Oct 9, 2012
Commits on Oct 8, 2012
  1. The range-header handling does not implement the following:

    pmundkur committed Oct 8, 2012
    http://tools.ietf.org/html/rfc2616#section-14.35.1
    
      If the last-byte-pos value is absent, or if
      the value is greater than or equal to the current
      length of the entity-body, last-byte-pos is taken
      to be equal to one less than the current length of
      the entity-body in bytes.
    
    Specifically, the 'greater than equal to' case.
Commits on Jul 28, 2012
Commits on May 10, 2012
  1. Merge pull request #77 from mmzeeman/master

    etrepum committed May 10, 2012
    Fix for problem with to_html rendering faulty html with singleton tags.
Commits on Apr 27, 2012
  1. Merge pull request #75 from mmzeeman/master

    etrepum committed Apr 27, 2012
    Fix for parsing unescaped < characters.
Commits on Apr 26, 2012
  1. Fix for parsing quoted attributes with newlines.

    mmzeeman committed Apr 26, 2012
    Quoted attributes are allowed to contain newlines.
Commits on Mar 31, 2012
Commits on Mar 9, 2012
Commits on Dec 17, 2011
  1. Merge branch 'edoc-warning-gh63'

    etrepum committed Dec 17, 2011
  2. fix edoc warnings

    etrepum committed Dec 17, 2011
  3. Merge branch 'html-amp-gh69'

    etrepum committed Dec 17, 2011
Commits on Nov 2, 2011
Commits on Oct 15, 2011
  1. Merge branch 'html5-gh64'

    etrepum committed Oct 15, 2011
  2. version bump

    etrepum committed Oct 15, 2011
  3. Support all HTML5 entities

    etrepum committed Oct 15, 2011
Commits on Oct 6, 2011
  1. Merge pull request #61 from kardan/master

    etrepum committed Oct 6, 2011
    Added new MIME types
Commits on Sep 30, 2011