-*- coding: utf-8 -*-
Changes with Apache 2.5.0
- *) mod_proxy_fcgi: Add ProxyFCGISetEnvIf to fixup CGI environment
- variables just before invoking the FastCGI. [Eric Covener]
+ *) mod_rewrite: Add 'RewriteOptions LongURLOptimization' to free memory
+ from each set of unmatched rewrite conditions.
+ [Eric Covener]
- *) mod_proxy: Allow the per-request environment variable "no-proxy" to
- be used as an alternative to ProxyPass /path !. This is primarily
- to set exceptions for ProxyPass specified in <Location> context.
- Use SetEnvIf, not SetEnv. [Eric Covener]
+ *) Allow the argument to <IfFile>, <IfDefine>, <IfSection>, <IfDirective>,
+ and <IfModule> to be quoted. This is primarily for the benefit of
+ <IfFile>. [Eric Covener]
- *) mod_http2: fix for crash when running out of memory.
- [Robert Swiecki <robert@swiecki.net>, Stefan Eissing]
-
- *) mod_ssl: work around leaks on (graceful) restart. [Yann Ylavic]
+ *) Introduce request taint checking framework to prevent privilege
+ hijacking through .htaccess. [Nick Kew]
+
+ *) core: Disallow multiple Listen on the same IP:port when listener buckets
+ are configured (ListenCoresBucketsRatio > 0), consistently with the single
+ bucket case (default), thus avoiding the leak of the corresponding socket
+ descriptors on graceful restart. [Yann Ylavic]
+
+ *) Add <IfDirective> and <IfSection> directives. [Joe Orton]
+
+ *) mod_syslog: Support use of optional "tag" in syslog entries.
+ PR 60525. [Ben Rubson <ben.rubson gmail.com>, Jim Jagielski]
*) When using mod_status with the Event MPM, report the number of requests
associated with an active connection in the "ACC" field. Previously
zero was always reported with this MPM. PR60647. [Eric Covener]
- *) core: %{DOCUMENT_URI} used in nested SSI expressions should point to the
- URI originally requsted by the user, not the nested documents URI. This
- restores the behavior of this variable to match the "legacy" SSI parser.
- PR60624. [Hank Ibell <hwibell gmail.com>]
-
*) mod_proxy_hcheck: Don't validate timed out responses. [Yann Ylavic]
- *) mod_proxy_hcheck: Ensure thread-safety when concurrent healthchecks are
- in use (ProxyHCTPsize > 0). PR 60071. [Yann Ylavic, Jim Jagielski]
-
- *) mod_proxy_fcgi: Return to 2.4.20-and-earlier behavior of leaving
- a "proxy:fcgi://" prefix in the SCRIPT_FILENAME environment variable by
- default. Add ProxyFCGIBackendType to allow the type of backend to be
- specified so these kinds of fixups can be restored without impacting
- FPM. PR60576 [Eric Covener]
-
- *) Don't set SO_REUSEPORT unless ListenCoresBucketsRatio is greater
- than zero. [Eric Covener]
-
- *) core: EBCDIC fixes for interim responses with additional headers.
- [Eric Covener]
-
*) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
Add ability for PROXY protocol processing to be optional to donated code.
See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
[Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
- *) mod_rewrite: When a substitution is a fully qualified URL, and the
- scheme/host/port matches the current virtual host, stop interpreting the
- path component as a local path just because the first component of the
- path exists in the filesystem. Adds RewriteOption "LegacyPrefixDocRoot"
- to revert to previous behavior. PR60009.
- [Hank Ibell <hwibell gmail.com>]
-
- *) core: Add %{REMOTE_PORT} to the expression parser. PR59938
- [Hank Ibell <hwibell gmail.com>]
-
*) mod_remoteip: When overriding the useragent address from X-Forwarded-For,
zero out what had been initialized as the connection-level port. PR59931.
[Hank Ibell <hwibell gmail.com>]
*) mod_proxy_protocol: Add server-side, front-end support for PROXY PROTOCOL
(http://blog.haproxy.com/haproxy/proxy-protocol/). [roadrunner2]
- *) mod_proxy_fcgi: Return HTTP 504 rather than 503 in case of proxy timeout.
- [Luca Toscano]
-
*) http: Allow unknown response status' lines returned in the form of
"HTTP/x.x xxx Status xxx". [Yann Ylavic]
*) event: Avoid listener periodic wake ups by using the pollset wake-ability
when available. PR 57399. [Yann Ylavic, Luca Toscano]
- *) mod_brotli: Add a new module for dynamic Brotli (RFC 7932) compression.
- [Evgeny Kotkov]
-
- *) core: Permit unencoded ';' characters to appear in proxy requests and
- Location: response headers. Corresponds to modern browser behavior.
- [William Rowe]
-
*) mod_crypto: Add the all purpose crypto filters with support for HLS.
[Graham Leggett]
*) core: Added support for HTTP code 451. PR58985.
[Yehuda Katz <yehuda ymkatz.net>, Jim Jagielski]
- *) mod_ssl: Add support for OpenSSL 1.1.0. [Rainer Jung]
-
*) mod_filter: Fix AddOutputFilterByType with non-content-level filters.
PR58856 [Micha Lenk <micha lenk.info>]