request-processor-procs.tcl

  • last updated 1 hour ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
add query parameters on redirect to cononical site

Standardize spelling of names of products (Tcl, AOLserver, PostgreSQL, NaviServer)

  1. … 43 more files in changeset.
Place upgrade from insecure request after the optional canonical check

- new feature for future releases: UseCanonicalLocation

to force requests submitted to a alternate DNS entry to be

redirected to a canonical name. For more background, see:

https://support.google.com/webmasters/answer/139066?hl=en

https://webmasters.stackexchange.com/questions/44830/should-i-redirect-the-site-ip-address-to-the-domain-name

- use ns_returnmoved (301) instead of ns_returnredirect (302)

for unwanted requests

Aolserver workaround for ns_set get

- white space change (replace trailing spaces)

- avoid nesting double quotes

- put resetting of untrusted user_id to the right place

  1. … 1 more file in changeset.
- use more consistent quoting

- make handling of URLs pointing to unresolvable package_keys more robust

- avoid potential errors in the error.log for urls which are not pointing to mounted packages (where [ad_conn package_key] is empty)

- remove "global" statements and use "::" prefix instead

- fix code that can't work. ... anyhow, package_key seems not be used here

- move comment to the right place

- Implements "Upgrade Insecure Requests" headers:

W3C Candidate Recommendation

https://www.w3.org/TR/upgrade-insecure-requests/

- added kernel parameter MaxUrlLength (default 2000) to remove

hard-coded length in request-processor-procs.

- lifted data model restriction of 100 characters for url-segments

(changing types of "site_nodes.name" from "varchar(100)" to "text")

(PostgreSQL only)

- site_node__node_id

* use built-in string functions instead of characterwise loop

* use default for last argument

* Improve source-code documentation

- bumped version number of kernel to 5.9.1d15

  1. … 3 more files in changeset.
Improving root_of_host_

- reduce dependency of the paths in the configuration script

- treat not only http, but as well https locations

- improve comments

- don't complain in rp_lookup_node_from_host when pass-in host is emtpy (return empty node_id as well)

- removed escaped testing code

- regenerated documentation to fix escaping problem in docbook: when a "programlisting" contains a message key, it is properly escaped when putting a ­ after the first hash

  1. … 124 more files in changeset.
- improve behavior on invalid host headers and comment the purpose in more detail

  1. … 1 more file in changeset.
- terminate filter with filter_return when errors occur

- fix error message

- return for unset host entry ""

- add validation against invalid host header fields

  1. … 3 more files in changeset.
- use filter_return to terminate filter on errors

- return complaint in case of invalid lanuguage setup

- don't swallow sliently exceptions

- reject requests where host contains invalid characters

- split ad_log into two parts; util::request_info returns now the request information as a string, can be used in web-interface as well

  1. … 1 more file in changeset.
- use consistently "clock clicks -microseconds"

- bump version number to 5.9.1d8

  1. … 1 more file in changeset.