1
0
mirror of https://github.com/rkd77/elinks.git synced 2024-11-04 08:17:17 -05:00
Commit Graph

4230 Commits

Author SHA1 Message Date
Witold Filipczyk
8c377a083d [cookies] Check cookie path according to RFC 6265. Added test 2020-05-10 15:52:33 +02:00
rkd77
3ea14631bb
Merge pull request #44 from aelmahmoudy/cookie-path
cookies: Properly handle cookie path= equal to request path
2020-05-10 14:56:17 +02:00
Ian Jackson
9bb3415811 cookies: Properly handle cookie path= equal to request path
The code in cookies.c would arrange that c->path would always contain
a string ending in "/".  This may have been an attempt to make it
easier to do a proper subpath check in is_path_prefix.

Howver, the overall result is wrong in the case
   Set-Cookie: ....;path=/some/thing
and then later
   http://site.example.com/some/thing

c->path gets set to "/some/thing/" which doesn't pass the test in
is_path_prefix.

The precise required algorithm is described in RFC6265 5.1.4.  The
existing code fails to implement the first of the three bulleted
conditions at the end of 5.1.4.

The trailing "/" is actually not so helpful for this.  It is more
convenient to change is_path_prefix to do subpath matching directly:
we change it to insist that the supposed path prefix is a textual
prefix of the request path, *and* that this happens at a path segment
boundary: ie at '/' or end of string.[1]

Accordingly, we no longer add "/" to the cookie path.  When we strip
the final path element we strip the "/" too.  We still insert a "/" if
the path was empty.

[1] It is not 100% clear to me what "path" (URI_PATH) is but I think
it does not include any query parameters.  If I am wrong about that
then '?' should be tolerated too.

CC: Mark Wooding <mdw@distorted.org.uk>
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
2020-05-09 14:33:45 +02:00
Witold Filipczyk
eb46577ccb [options] Added remote's reload and search to elinks --long-help 2020-05-06 20:32:19 +02:00
Witold Filipczyk
d857560466 [ipv6] this code was not tested 2020-05-05 21:48:22 +02:00
Witold Filipczyk
5188b8ab84 [network] -bind-address-ipv6 <ipv6> to bind to IPv6 address 2020-05-05 21:39:54 +02:00
Witold Filipczyk
35e32f5acb [network] -bind-address <ipv4> cmdline option to bind to given IP address 2020-05-05 21:18:29 +02:00
rkd77
08d200f42c
Merge pull request #43 from sgerwk/master
document the -remote search(string) function
2020-05-04 13:53:53 +02:00
sgerwk
5b88e3ac9c document the -remote search(string) function 2020-05-03 16:31:44 +02:00
Witold Filipczyk
5c57cf6270 [fragment] Do not move to the top, when nonexisting fragment is in current document. Refs #42
Behaviour similar to bigger browsers.
2020-04-28 19:13:36 +02:00
Witold Filipczyk
95466e73ed [remote] Slightly modified -remote search 2020-04-26 11:45:46 +02:00
rkd77
36fc784212
Merge pull request #41 from sgerwk/master
add -remote 'search(string)'
2020-04-26 11:32:40 +02:00
sgerwk
d1be5c322f add -remote 'search(string)' 2020-04-25 19:55:16 +02:00
rkd77
8f6b67a780
Merge pull request #40 from aelmahmoudy/debwatch
Update watch file
2020-02-05 21:51:28 +01:00
أحمد المحمودي (Ahmed El-Mahmoudy)
52d492abd3 Update watch file 2020-02-05 16:22:40 +01:00
Witold Filipczyk
5ab768a25e [README] Some notes about felinks origin 2020-02-04 11:58:12 +01:00
Witold Filipczyk
52ed7c5926 [NEWS] Info about 0.13.1 2020-01-31 17:48:44 +01:00
Witold Filipczyk
4416e3be8d [python3] one time conversion of asciidoc to Python3. Refs #38
Likely it will fail on Cygwin.
2020-01-04 20:15:28 +01:00
Witold Filipczyk
5967eb93b4 [python3] python3 for asciidoc 2020-01-04 20:12:34 +01:00
Witold Filipczyk
0eaf9526bb [python3] proxy.py ported to python3. Refs #38 2020-01-04 16:05:10 +01:00
Witold Filipczyk
4fb19bd1fd [python3] big_file.cgi ported to Python3. Refs #38 2020-01-03 20:20:43 +01:00
Witold Filipczyk
5f462239be [cgi] Calculate CONTENT_LENGTH also for file uploads
Before big_file.cgi caused pipe errors when ported to Python3.
2020-01-03 20:17:10 +01:00
Witold Filipczyk
a27e9b168c [python3] adjust code to Python3 in test scripts. Refs #38
I don't know how to fix big_file.cgi
If you know how to get equivalent of this script in Python3, tell me.
2020-01-01 16:07:14 +01:00
Witold Filipczyk
df905c7481 Changed version. 2019-12-27 17:33:27 +01:00
Witold Filipczyk
e4220c0301 [encoding] Do not announce "deflate" as supported encoding method 2019-12-22 11:30:12 +01:00
Witold Filipczyk
3db5c51b8d [sites] URL to github 2019-12-20 14:44:50 +01:00
Witold Filipczyk
d8de9ac7e5 [gcc] pragma outside function body 2019-12-06 20:13:38 +01:00
Witold Filipczyk
e8cb012ada [ssl] Allow older versions of openssl. Refs #37 2019-12-06 18:50:31 +01:00
Witold Filipczyk
51dd9e7e6e [color] Revert changes related to leading and trailing spaces and colours
It did not look good.
2019-11-21 21:01:49 +01:00
Witold Filipczyk
b73fb5c7ec [po] Updated Polish translation 2019-11-19 17:59:17 +01:00
Witold Filipczyk
ce3f8a1ab8 [po] Update 2019-11-19 16:59:36 +01:00
Witold Filipczyk
af3b2073a1 [po] verbatim translation of seeders 2019-11-19 16:52:23 +01:00
Witold Filipczyk
e532e348f8 [timer] set_event_for_timer is only for libevent 2019-11-16 11:35:18 +01:00
Witold Filipczyk
d56ad7ceb0 [select] restrict_fds was called only with LIBEVENT and POLL 2019-11-16 11:29:06 +01:00
Witold Filipczyk
21b8cf37d9 [select] Fixes based on links code
bittorrent code caused segmentation fault, because get_handler read
outside of current fd range. Workaround is to return NULL.
2019-11-16 09:40:01 +01:00
Witold Filipczyk
f50e306d16 [bittorrent] I'm not sure, but I guess it was a bug here.
sizeof == 8 vs sizeof == 20
2019-11-15 17:29:58 +01:00
Witold Filipczyk
94c6c950f7 [zstd] include 2019-11-15 17:09:31 +01:00
Witold Filipczyk
ca3926bb9d [ecmascript] No warning 2019-11-15 16:40:29 +01:00
Witold Filipczyk
558baa830e [select] More code to avoid warning 2019-11-15 16:37:02 +01:00
Witold Filipczyk
0724c3c49d [gcc] Silent gcc. I guess code was ok. 2019-11-15 16:27:16 +01:00
Witold Filipczyk
85066d7016 [gnutls] gnutls_compression_get_name is deprecated. 2019-11-15 16:13:17 +01:00
Witold Filipczyk
7456f785ca [ssl] wrong signature of function 2019-11-15 14:33:30 +01:00
Witold Filipczyk
6b9d6c93df [ssl] ASN1_STRING_data is deprecated 2019-11-15 14:24:59 +01:00
Witold Filipczyk
903fc4984d [ssl] RAND_pseudo_bytes is deprecated. 2019-11-15 14:19:47 +01:00
Witold Filipczyk
5c71cc384e [configure] gcc -dumpversion returns 8 on Debian Buster 2019-11-14 15:21:44 +01:00
Witold Filipczyk
b32edcc5a6 [setup] github urls 2019-11-11 16:29:09 +01:00
Witold Filipczyk
b3e01b3298 [scripting] python scripting with Python3.
Only utf-8 encoding is supported.
2019-11-11 13:33:37 +01:00
rkd77
e8addcb561
Merge pull request #36 from sgerwk/master
document '-remote reload()'
2019-09-30 21:57:02 +02:00
sgerwk
9d2755d101 add autogen.sh to compiling instructions 2019-09-30 17:57:47 +02:00
sgerwk
abc7a8f20a document '-remote reload()' 2019-09-30 17:43:06 +02:00