Introduce ap_scan_http_field_content, ap_scan_http_token

[apache] / CHANGES

diff --git a/CHANGES b/CHANGES
index c7e8d62f06fcc8a0bc1b4ffc51cc26413e26edb7..34579a6f25a567ff3af6b21683e1e3384530be92 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,14 +1,44 @@
                                                          -*- coding: utf-8 -*-
 Changes with Apache 2.5.0
 
-  *) mod_proxy_http2: improved retry behaviour when encountering timed out
-     or shut down connections. [Stefan Eissing] 
+  *) mod_reqtimeout: Fix body timeout disabling for CONNECT requests to avoid
+     triggering mod_proxy_connect's AH01018 once the tunnel is established.
+     [Yann Ylavic]
+
+  *) mod_proxy_balancer: Prevent redirect loops between workers within a
+     balancer by limiting the number of redirects to the number balancer
+     members. PR 59864 [Ruediger Pluem]
+
+  *) mod_proxy: Correctly consider error response codes by the backend when
+     processing failonstatus. PR 59869 [Ruediger Pluem]
+
+  *) mod_proxy_fcgi: avoid loops when ProxyErrorOverride is enabled
+     and the error documents are proxied. PR 55415. [Luca Toscano]
+
+  *) mod_proxy_fcgi: read the whole FCGI response even when the content has
+     not been modified (HTTP 304) to avoid subsequent bogus reads and
+     confusing error messages logged. [Luca Toscano]
+
+  *) mod_crypto: Add the all purpose crypto filters with support for HLS.
+     [Graham Leggett]
+
+  *) ab: Add option -I to use the Server Name Indication (SNI) extension on
+     outgoing TLS connections, according to the Host header (if any) or the
+     requested URL's hostname otherwise.  [Yann Ylavic]
+
+  *) mod_ssl: reset client-verify state of ssl when aborting renegotiations.
+     [Erki Aring <erki@example.ee>, Stefan Eissing]
+
+  *) mod_proxy_{http,ajp,fcgi}: don't reuse backend connections with data
+     available before the request is sent.  PR 57832.  [Yann Ylavic]
 
   *) mod_sed: Fix 'x' command processing. [Christophe Jaillet]
 
   *) core: Drop an invalid Last-Modified header value coming
      from a FCGI/CGI script instead of replacing it with Unix epoch.
-     [Luca Toscano]
+     Warn the users about Last-Modified header value replacements and 
+     improved handling of non-GMT datestr.
+     [Yann Ylavic, Luca Toscano]
 
   *) mod_dav: Allow other modules to become providers and add ACLs
      to the DAV response.
@@ -30,7 +60,7 @@ Changes with Apache 2.5.0
 
   *) core: explicitly exclude 'h2' from protocols announced via an Upgrade: 
      header as commanded by http-wg. [Stefan Eissing]
-     
+
   *) http: Respond with "408 Request Timeout" when a timeout occurs while
      reading the request body.  [Yann Ylavic]
 
@@ -75,7 +105,7 @@ Changes with Apache 2.5.0
      [Yehuda Katz <yehuda ymkatz.net>, Jim Jagielski]
 
   *) mod_ssl: Add support for OpenSSL 1.1.0. [Rainer Jung]
- 
+
   *) mod_filter: Fix AddOutputFilterByType with non-content-level filters.
      PR58856 [Micha Lenk <micha lenk.info>]