Witold Filipczyk
8c377a083d
[cookies] Check cookie path according to RFC 6265. Added test
2020-05-10 15:52:33 +02:00
rkd77
3ea14631bb
Merge pull request #44 from aelmahmoudy/cookie-path
...
cookies: Properly handle cookie path= equal to request path
2020-05-10 14:56:17 +02:00
Ian Jackson
9bb3415811
cookies: Properly handle cookie path= equal to request path
...
The code in cookies.c would arrange that c->path would always contain
a string ending in "/". This may have been an attempt to make it
easier to do a proper subpath check in is_path_prefix.
Howver, the overall result is wrong in the case
Set-Cookie: ....;path=/some/thing
and then later
http://site.example.com/some/thing
c->path gets set to "/some/thing/" which doesn't pass the test in
is_path_prefix.
The precise required algorithm is described in RFC6265 5.1.4. The
existing code fails to implement the first of the three bulleted
conditions at the end of 5.1.4.
The trailing "/" is actually not so helpful for this. It is more
convenient to change is_path_prefix to do subpath matching directly:
we change it to insist that the supposed path prefix is a textual
prefix of the request path, *and* that this happens at a path segment
boundary: ie at '/' or end of string.[1]
Accordingly, we no longer add "/" to the cookie path. When we strip
the final path element we strip the "/" too. We still insert a "/" if
the path was empty.
[1] It is not 100% clear to me what "path" (URI_PATH) is but I think
it does not include any query parameters. If I am wrong about that
then '?' should be tolerated too.
CC: Mark Wooding <mdw@distorted.org.uk>
Signed-off-by: Ian Jackson <ijackson@chiark.greenend.org.uk>
2020-05-09 14:33:45 +02:00
Witold Filipczyk
eb46577ccb
[options] Added remote's reload and search to elinks --long-help
2020-05-06 20:32:19 +02:00
Witold Filipczyk
d857560466
[ipv6] this code was not tested
2020-05-05 21:48:22 +02:00
Witold Filipczyk
5188b8ab84
[network] -bind-address-ipv6 <ipv6> to bind to IPv6 address
2020-05-05 21:39:54 +02:00
Witold Filipczyk
35e32f5acb
[network] -bind-address <ipv4> cmdline option to bind to given IP address
2020-05-05 21:18:29 +02:00
rkd77
08d200f42c
Merge pull request #43 from sgerwk/master
...
document the -remote search(string) function
2020-05-04 13:53:53 +02:00
sgerwk
5b88e3ac9c
document the -remote search(string) function
2020-05-03 16:31:44 +02:00
Witold Filipczyk
5c57cf6270
[fragment] Do not move to the top, when nonexisting fragment is in current document. Refs #42
...
Behaviour similar to bigger browsers.
2020-04-28 19:13:36 +02:00
Witold Filipczyk
95466e73ed
[remote] Slightly modified -remote search
2020-04-26 11:45:46 +02:00
rkd77
36fc784212
Merge pull request #41 from sgerwk/master
...
add -remote 'search(string)'
2020-04-26 11:32:40 +02:00
sgerwk
d1be5c322f
add -remote 'search(string)'
2020-04-25 19:55:16 +02:00
rkd77
8f6b67a780
Merge pull request #40 from aelmahmoudy/debwatch
...
Update watch file
2020-02-05 21:51:28 +01:00
أحمد المحمودي (Ahmed El-Mahmoudy)
52d492abd3
Update watch file
2020-02-05 16:22:40 +01:00
Witold Filipczyk
5ab768a25e
[README] Some notes about felinks origin
2020-02-04 11:58:12 +01:00
Witold Filipczyk
52ed7c5926
[NEWS] Info about 0.13.1
2020-01-31 17:48:44 +01:00
Witold Filipczyk
4416e3be8d
[python3] one time conversion of asciidoc to Python3. Refs #38
...
Likely it will fail on Cygwin.
2020-01-04 20:15:28 +01:00
Witold Filipczyk
5967eb93b4
[python3] python3 for asciidoc
2020-01-04 20:12:34 +01:00
Witold Filipczyk
0eaf9526bb
[python3] proxy.py ported to python3. Refs #38
2020-01-04 16:05:10 +01:00
Witold Filipczyk
4fb19bd1fd
[python3] big_file.cgi ported to Python3. Refs #38
2020-01-03 20:20:43 +01:00
Witold Filipczyk
5f462239be
[cgi] Calculate CONTENT_LENGTH also for file uploads
...
Before big_file.cgi caused pipe errors when ported to Python3.
2020-01-03 20:17:10 +01:00
Witold Filipczyk
a27e9b168c
[python3] adjust code to Python3 in test scripts. Refs #38
...
I don't know how to fix big_file.cgi
If you know how to get equivalent of this script in Python3, tell me.
2020-01-01 16:07:14 +01:00
Witold Filipczyk
df905c7481
Changed version.
2019-12-27 17:33:27 +01:00
Witold Filipczyk
e4220c0301
[encoding] Do not announce "deflate" as supported encoding method
2019-12-22 11:30:12 +01:00
Witold Filipczyk
3db5c51b8d
[sites] URL to github
2019-12-20 14:44:50 +01:00
Witold Filipczyk
d8de9ac7e5
[gcc] pragma outside function body
2019-12-06 20:13:38 +01:00
Witold Filipczyk
e8cb012ada
[ssl] Allow older versions of openssl. Refs #37
2019-12-06 18:50:31 +01:00
Witold Filipczyk
51dd9e7e6e
[color] Revert changes related to leading and trailing spaces and colours
...
It did not look good.
2019-11-21 21:01:49 +01:00
Witold Filipczyk
b73fb5c7ec
[po] Updated Polish translation
2019-11-19 17:59:17 +01:00
Witold Filipczyk
ce3f8a1ab8
[po] Update
2019-11-19 16:59:36 +01:00
Witold Filipczyk
af3b2073a1
[po] verbatim translation of seeders
2019-11-19 16:52:23 +01:00
Witold Filipczyk
e532e348f8
[timer] set_event_for_timer is only for libevent
2019-11-16 11:35:18 +01:00
Witold Filipczyk
d56ad7ceb0
[select] restrict_fds was called only with LIBEVENT and POLL
2019-11-16 11:29:06 +01:00
Witold Filipczyk
21b8cf37d9
[select] Fixes based on links code
...
bittorrent code caused segmentation fault, because get_handler read
outside of current fd range. Workaround is to return NULL.
2019-11-16 09:40:01 +01:00
Witold Filipczyk
f50e306d16
[bittorrent] I'm not sure, but I guess it was a bug here.
...
sizeof == 8 vs sizeof == 20
2019-11-15 17:29:58 +01:00
Witold Filipczyk
94c6c950f7
[zstd] include
2019-11-15 17:09:31 +01:00
Witold Filipczyk
ca3926bb9d
[ecmascript] No warning
2019-11-15 16:40:29 +01:00
Witold Filipczyk
558baa830e
[select] More code to avoid warning
2019-11-15 16:37:02 +01:00
Witold Filipczyk
0724c3c49d
[gcc] Silent gcc. I guess code was ok.
2019-11-15 16:27:16 +01:00
Witold Filipczyk
85066d7016
[gnutls] gnutls_compression_get_name is deprecated.
2019-11-15 16:13:17 +01:00
Witold Filipczyk
7456f785ca
[ssl] wrong signature of function
2019-11-15 14:33:30 +01:00
Witold Filipczyk
6b9d6c93df
[ssl] ASN1_STRING_data is deprecated
2019-11-15 14:24:59 +01:00
Witold Filipczyk
903fc4984d
[ssl] RAND_pseudo_bytes is deprecated.
2019-11-15 14:19:47 +01:00
Witold Filipczyk
5c71cc384e
[configure] gcc -dumpversion returns 8 on Debian Buster
2019-11-14 15:21:44 +01:00
Witold Filipczyk
b32edcc5a6
[setup] github urls
2019-11-11 16:29:09 +01:00
Witold Filipczyk
b3e01b3298
[scripting] python scripting with Python3.
...
Only utf-8 encoding is supported.
2019-11-11 13:33:37 +01:00
rkd77
e8addcb561
Merge pull request #36 from sgerwk/master
...
document '-remote reload()'
2019-09-30 21:57:02 +02:00
sgerwk
9d2755d101
add autogen.sh to compiling instructions
2019-09-30 17:57:47 +02:00
sgerwk
abc7a8f20a
document '-remote reload()'
2019-09-30 17:43:06 +02:00