1$NetBSD: CHANGES,v 1.25 2017/01/31 14:33:54 mrg Exp $ 2 3changes in bozohttpd 20170201: 4 o fix an infinite loop in cgi processing 5 o fixes and clean up for the testsuite 6 o no longer sends encoding header for compressed formats 7 8changes in bozohttpd 20160517: 9 o add a bozo_get_version() function which returns the version number 10 11changes in bozohttpd 20160415: 12 o add search-word support for CGI 13 o fix a security issue in CGI suffix handler support which would 14 allow remote code execution, from shm@netbsd.org 15 o -C option supports now CGI scripts only 16 17changes in bozohttpd 20151028: 18 o add CGI support for ~user translation (-E switch) 19 o add redirects to ~user translation 20 o fix bugs around ~user translation 21 o add schema detection for absolute redirects 22 o fixed few memory leaks 23 o bunch of minor tweaks 24 o removed -r support 25 o smarter redirects 26 27changes in bozohttpd 20150320: 28 o fix redirection handling 29 o support transport stream (.ts) and video object (.vob) files 30 o directory listings show correct file sizes for large files 31 32changes in bozohttpd 20140717: 33 o properly handle SSL errors 34 35changes in bozohttpd 20140708: 36 o fixes for virtual host support, from rajeev_v_pillai@yahoo.com 37 o avoid printing double errors, from shm@netbsd.org 38 o fix a security issue in basic HTTP authentication which would allow 39 authentication to be bypassed, from shm@netbsd.org 40 41changes in bozohttpd 20140201: 42 o support .svg files 43 o fix a core dump when requests timeout 44 45changes in bozohttpd 20140102: 46 o update a few content types 47 o add support for directly calling lua scripts to handle 48 processes, from mbalmer@netbsd.org 49 o properly escape generated HTML 50 o add authentication for redirections, from martin@netbsd.org 51 o handle chained ssl certifications, from elric@netbsd.org 52 o add basic support for gzipped files, from elric@netbsd.org 53 o properly escape generated URIs 54 55changes in bozohttpd 20111118: 56 o add -P <pidfile> option, from jmmv@netbsd.org 57 o avoid crashes with http basic auth, from pooka@netbsd.org 58 o add support for REDIRECT_STATUS variable, from tls@netbsd.org 59 o support .mp4 files in the default map 60 o directory indexes with files with : are now displayed properly, from 61 reed@netbsd.org 62 o allow -I option to be useful in non-inetd mode as well 63 64changes in bozohttpd 20100920: 65 o properly fully disable multi-file mode for now 66 o fix the -t and -U options when used without the -e option, broken since 67 the library-ifcation 68 o be explicit that logs go to the FTP facility in syslog 69 o use scandir() with alphasort() for sorted directory lists, from moof 70 o fix a serious error in vhost handling; "Host:.." would allow access to 71 the next level directory from the virtual root directory, from seanb 72 o fix some various non standard compile time errors, from rudolf 73 o fix dynamic CGI content maps, from rudolf 74 75changes in bozohttpd 20100617: 76 o fix some compile issues 77 o fix SSL mode. from rtr 78 o fix some cgi-bin issues, as seen with cvsweb 79 o disable multi-file daemon mode for now, it breaks 80 o return 404's instead of 403's when chdir of ~user dirs fail 81 o remove "noreturn" attribute from bozo_http_error() that was 82 causing incorrect runtime behaviour 83 84changes in bozohttpd 20100509: 85 o major rework and clean up of internal interfaces. move the main 86 program into main.c, the remaining parts are useable as library. 87 add bindings for lua. by Alistair G. Crooks <agc@netbsd.org> 88 o fix http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=566325 89 90changes in bozohttpd 20090522: 91 o avoid dying in daemon mode for some uncommon, but recoverable, errors 92 o close leaking file descriptors for CGI and daemon mode 93 o handle poll errors properly 94 o don't try to handle more than one request per process yet 95 o add subdirs for build "debug" and "small" versions 96 o clean up a bad merge / duplicate code 97 o make mmap() usage portable, fixes linux & ranges: support 98 o document the -f option 99 o daemon mode now serves 6 files per child 100 101changes in bozohttpd 20090417: 102 o make bozohttpd internally more modular, preparing the way 103 to handle more than one request per process 104 o fix http-auth, set $REMOTE_USER not $REMOTEUSER. also fix 105 cgi-bin with cvsweb, from Holger Weiss <holger@CIS.FU-Berlin.DE> 106 o fix an uninitialised variable use in daemon mode 107 o fix ssl mode with newer OpenSSL 108 o mmap large files in manageable sizes so we can serve any size file 109 o refactor url processing to handle query strings correctly for CGI 110 from Sergey Katsev at Coyote Point 111 o add If-Modified-Since support, from Joerg Sonnenberger 112 <joerg@netbsd.org> 113 o many more manual fixes, from NetBSD 114 115changes in bozohttpd 20080303: 116 o fix some cgi header processing, from <thelsdj@gmail.com> 117 o add simple Range: header processing, from <bad@bsd.de> 118 o man page fixes, from NetBSD 119 o clean up various parts, from NetBSD 120 121changes in bozohttpd 20060710: 122 o prefix some function names with "bozo" 123 o align directory indexing <hr> markers 124 o clean up some code GCC4 grumbled about 125 126changes in bozohttpd 20060517: 127 o don't allow "/.." or "../" files 128 o don't write ":80" into urls for the http port 129 o fix a fd leak when fork() fails 130 o make directory indexing mode not look so ugly 131 o build a text version of the manual page 132 o make "make clean" work properly 133 134changes in bozohttpd 20050410: 135 o fix some off-by-one errors from <roland.illig@gmx.de> 136 o properly support nph- CGI 137 o make content maps case insensitive 138 o fix proto header merging to include the missing comma 139 o major source reorganisation; most features are in separate files now 140 o new -V flag that makes unknown virtualhosts use slashdir 141 from <rumble@ephemeral.org> 142 o HTTP/1.x protocol headers are now properly merged for CGI 143 144changes in bozohttpd 20040808: 145 o CGI status is now properly handled (-a flag has been removed) 146 o CGI file upload support works 147 o %xy translations are no longer ever applied after the first '?', 148 ala RFC2396. from lukem 149 o daemon mode (-b) should no longer hang spinning forever if it 150 sees no children. from lukem 151 o new .bzabsredirect file support. from <martin@netbsd.org> 152 o return a 404 error if we see %00 or %2f (/) 153 o don't print 2 "200" headers for CGI 154 o support .torrent files 155 156changes in bozohttpd 20040218: 157 o new .bzredirect file support for sane directory redirection 158 o new -Z option that enables SSL mode, from <rtr@eterna.com.au> 159 o the -C option has been changed to take two explicit options, rather 160 than a single option with a space separating the suffix and the 161 interpreter. ``-C ".foo /path/to/bar"'' should now be written 162 as ``-C .foo /path/to/bar'' 163 o the -M option has been changed like -C and no longer requires or 164 supports a single argument with space-separated options 165 o with -a, still print the 200 OK. from <rtr@eterna.com.au> 166 o with -r, if a .bzdirect file appears in a directory, allow direct 167 access to this directory 168 169changes in bozohttpd 20031005: 170 o fixes for basic authorisation. from <ecu@ipv42.net> 171 o always display file size in directory index mode 172 o add .xbel, .xml & .xsl -> text/xml mappings. from 173 <wiz@danbala.ifoer.tuwien.ac.at> 174 175changes in bozohttpd 20030626: 176 o fix a recent core dump when given no input 177 o add new -r flag that ensures referrer is set to this host 178 o fix several compile time errors with -DNO_CGIBIN_SUPPORT 179 o fix some man page details. from lukem@wasabisystems.com 180 o re-add a missing memset(), fixing a core dump. from lukem 181 o support HTTP basic authorisation, disabled by default. from lukem 182 o print the port number in redirects and errors. from lukem 183 o only syslog the basename of the program. from lukem 184 o add __attribute__() format checking. from lukem 185 o fix cgibin SCRIPT_NAME to have a leading /. from zakj@nox.cx 186 o simplify some code in -C to avoid a core dump. from lukem 187 o add a .css -> css/text entry to the content_map[]. from zakj@nox.cx 188 189changes in bozohttpd 20030409: 190 o -d without DEBUG enabled only prints one warning and continues 191 o one can now define the C macro SERVER_SOFTWARE when building to 192 change the Server: header and CGI variable of the same name 193 o add new -s flag the force logging output to stderr. from zakj@nox.cx 194 o add new -a flag for CGI bin that stops bozohttpd from outputting 195 any HTTP reply, the CGI program must output these. from zakj@nox.cx 196 o new REQUEST_URI and DATE_GMT environment variables for CGI. from 197 zakj@nox.cx 198 o add a "Makefile.boot" that should work with any make program 199 o build on linux again 200 o fix core dumps when using -C 201 202changes in bozohttpd 20030313: 203 o deprecate -r flag; make this the default and silently ignore -r now 204 o add support for file extentions to call CGI programs (from lukem) 205 o add dynamic support to add new content map entries, allowing both 206 new file types and non /cgi-bin CGI programs to be run with the 207 new -C "suffix cgihandler" and -M "suffix type encoding encoding11" 208 options 209 o in -b mode, set the http date after accept() returns, not before we 210 call accept() 211 o in -b mode, bind all addresses found not just the first one 212 o unsupport old hostname API 213 o in -b mode, set the SO_REUSEADDR socket option (lukem) 214 o allow -x (index.html) mode to work with CGI handlers 215 216changes in bozohttpd 20021106: 217 o add .bz2 support 218 o properly escape <, > and & in error messages, partly from 219 Nicolas Jombart <ecu@mariejeanne.net> 220 o new -H flag to hide .* files in directory index mode 221 o fix buffer reallocation when parsing a request, to avoid 222 overflowing the buffer with carriage returns (\r) 223 o do not decode "%XY"-style cgi-bin data beyond the "?" 224 225changes in bozohttpd 5.15 (20020913): 226 o add .ogg support -> `application/x-ogg' 227 o fix CGI requests with "/" in the query part 228 229changes in bozohttpd 5.14 (20020823): 230 o allow -X mode to work for "/" 231 o work on systems without MADV_SEQUENTIAL 232 o make a local cut-down copy of "queue.h" (fixes linux & solaris 233 support at the very least) 234 o portability fixes for pre-ipv6 socket api systems (eg, solaris 7) 235 o portability fixes for missing _PATH_DEFPATH, LOG_FTP and __progname 236 o better documentation on virtual host support 237 238changes in bozohttpd 5.13 (20020804): 239 o support .mp3 files (type audio/mpeg) 240 o use stat() to find out if something is a directory, for -X mode 241 242changes in bozohttpd 5.12 (20020803): 243 o constification 244 o fixes & enhancements for directory index mode (-X) 245 246changes in bozohttpd 5.11 (20020730): 247 o more man page fixes from Thomas Klausner 248 <wiz@danbala.ifoer.tuwien.ac.at> 249 o de-K&R C-ification 250 o fix Date: header for daemon mode 251 o fix core dump when asking for /cgi-bin/ when CGI isn't configured 252 o use a valid Server: header 253 254changes in bozohttpd 5.10 (20020710): 255 - add freebsd support 256 - fix a couple of header typos 257 - many cgi-bin fixes from lukem@netbsd.org 258 - add -T chrootdir and -U user, plus several minor other cleanups 259 with signals and return values. from xs@kittenz.org 260 - add -e that does not clear the environment for -T/-U 261 - fix a formatting error noticed by ISIHARA Takanori <ishit@oak.dti.ne.jp> 262 263changes in bozohttpd 5.09 (20010922): 264 - add a daemon mode 265 - document how to use bozohttpd in netbsd inetd with more than 40 266 connections per minute and also with cgibin 267 - man page fixes from wiz@netbsd.org 268 269changes in bozohttpd 5.08 (20010812): 270 - add directory index generation support (-X) from ad@netbsd.org 271 - add .pa as an alias for .pac 272 - make server software version configurable (RFC) 273 274changes in bozohttpd 5.07 (20010610): 275 - add .png support 276 - new "-x index.html" flag to change default file 277 - new "-p public_html" flag to change default ~user directory 278 - fixes cgi-bin support and more from chuck@research.att.com 279 - add many new content-types, now support most common ones 280 281changes in bozohttpd 5.06 (20000825): 282 - add IPv6 suppor from itojun@iijlab.net 283 - man page fixes from jlam@netbsd.org 284 285changes in bozohttpd 5.05 (20000815): 286 - fix a virtual host bug, from kleink@netbsd.org 287 288changes in bozohttpd 5.04 (20000427): 289 - fix virtual host support; URI takes precedence over Host: 290 291changes in bozohttpd 5.03 (20000427): 292 - fix a bug with chdir() 293 294changes in bozohttpd 5.02 (20000426): 295 - .pac spport from simonb 296 297changes in bozohttpd 5.01 (20000421): 298 - .swf support 299 - virtual hosting support 300