-*- coding: utf-8 -*-
Changes with Apache 2.5.0
- *) mod_http2: MaxKeepAliveRequests now limits the number of times a
- slave connection gets reused. [Stefan Eissing]
+ *) mod_rewrite: Add 'RewriteOptions LongURLOptimization' to free memory
+ from each set of unmatched rewrite conditions.
+ [Eric Covener]
- *) mod_substitute: Fix spurious AH01328 (Line too long) errors on EBCDIC
- systems. [Eric Covener]
+ *) Allow the argument to <IfFile>, <IfDefine>, <IfSection>, <IfDirective>,
+ and <IfModule> to be quoted. This is primarily for the benefit of
+ <IfFile>. [Eric Covener]
- *) mod_http2: client streams that lack the EOF flag get now forcefully
- closed with a RST_STREAM (NO_ERROR) when the request has been answered.
- [Stefan Eissing]
+ *) Introduce request taint checking framework to prevent privilege
+ hijacking through .htaccess. [Nick Kew]
- *) mod_http2: only when 'HttpProtocolOptions Unsafe' is configured, will
- control characters in response headers or trailers be forwarded to the
- client. Otherwise, in the default configuration, a request will eiher
- fail with status 500 or the stream will be reset by a RST_STREAM frame.
- [Stefan Eissing]
-
*) core: Disallow multiple Listen on the same IP:port when listener buckets
are configured (ListenCoresBucketsRatio > 0), consistently with the single
bucket case (default), thus avoiding the leak of the corresponding socket
descriptors on graceful restart. [Yann Ylavic]
- *) mod_autoindex: Add IndexOptions UseOldDateFormat to allow the date
- format from 2.2 in the Last Modified column. PR60846.
- [Hank Ibell <hwibell gmail.com>]
-
*) Add <IfDirective> and <IfSection> directives. [Joe Orton]
*) mod_syslog: Support use of optional "tag" in syslog entries.
PR 60525. [Ben Rubson <ben.rubson gmail.com>, Jim Jagielski]
- *) MPMs unix: Place signals handlers and helpers out of DSOs to avoid
- a possible crash if a signal is caught during (graceful) restart.
- PR 60487. [Yann Ylavic]
-
- *) mod_proxy: Allow the per-request environment variable "no-proxy" to
- be used as an alternative to ProxyPass /path !. This is primarily
- to set exceptions for ProxyPass specified in <Location> context.
- Use SetEnvIf, not SetEnv. [Eric Covener]
-
*) When using mod_status with the Event MPM, report the number of requests
associated with an active connection in the "ACC" field. Previously
zero was always reported with this MPM. PR60647. [Eric Covener]
*) mod_proxy_hcheck: Don't validate timed out responses. [Yann Ylavic]
- *) mod_proxy_fcgi: Return to 2.4.20-and-earlier behavior of leaving
- a "proxy:fcgi://" prefix in the SCRIPT_FILENAME environment variable by
- default. Add ProxyFCGIBackendType to allow the type of backend to be
- specified so these kinds of fixups can be restored without impacting
- FPM. PR60576 [Eric Covener, Jim Jagielski]
-
- *) core: EBCDIC fixes for interim responses with additional headers.
- [Eric Covener]
-
*) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
Add ability for PROXY protocol processing to be optional to donated code.
See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
[Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
- *) mod_rewrite: When a substitution is a fully qualified URL, and the
- scheme/host/port matches the current virtual host, stop interpreting the
- path component as a local path just because the first component of the
- path exists in the filesystem. Adds RewriteOption "LegacyPrefixDocRoot"
- to revert to previous behavior. PR60009.
- [Hank Ibell <hwibell gmail.com>]
-
- *) core: Add %{REMOTE_PORT} to the expression parser. PR59938
- [Hank Ibell <hwibell gmail.com>]
-
*) mod_remoteip: When overriding the useragent address from X-Forwarded-For,
zero out what had been initialized as the connection-level port. PR59931.
[Hank Ibell <hwibell gmail.com>]
*) mod_proxy_protocol: Add server-side, front-end support for PROXY PROTOCOL
(http://blog.haproxy.com/haproxy/proxy-protocol/). [roadrunner2]
- *) mod_proxy_fcgi: Return HTTP 504 rather than 503 in case of proxy timeout.
- [Luca Toscano]
-
*) http: Allow unknown response status' lines returned in the form of
"HTTP/x.x xxx Status xxx". [Yann Ylavic]
*) event: Avoid listener periodic wake ups by using the pollset wake-ability
when available. PR 57399. [Yann Ylavic, Luca Toscano]
- *) mod_brotli: Add a new module for dynamic Brotli (RFC 7932) compression.
- [Evgeny Kotkov]
-
- *) core: Permit unencoded ';' characters to appear in proxy requests and
- Location: response headers. Corresponds to modern browser behavior.
- [William Rowe]
-
*) mod_crypto: Add the all purpose crypto filters with support for HLS.
[Graham Leggett]
projects / apache / blobdiff