request-processor-procs.tcl

  • last updated 1 hour ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Remove over-eager safety check

Prefer variable over proc to access the kernel id

add query parameters on redirect to cononical site

Standardize spelling of names of products (Tcl, AOLserver, PostgreSQL, NaviServer)

  1. … 43 more files in changeset.
Place upgrade from insecure request after the optional canonical check

- new feature for future releases: UseCanonicalLocation

to force requests submitted to a alternate DNS entry to be

redirected to a canonical name. For more background, see:

https://support.google.com/webmasters/answer/139066?hl=en

https://webmasters.stackexchange.com/questions/44830/should-i-redirect-the-site-ip-address-to-the-domain-name

- use ns_returnmoved (301) instead of ns_returnredirect (302)

for unwanted requests

Aolserver workaround for ns_set get

- white space change (replace trailing spaces)

- avoid nesting double quotes

- put resetting of untrusted user_id to the right place

  1. … 1 more file in changeset.
- use more consistent quoting

- make handling of URLs pointing to unresolvable package_keys more robust

- avoid potential errors in the error.log for urls which are not pointing to mounted packages (where [ad_conn package_key] is empty)

- remove "global" statements and use "::" prefix instead

- fix code that can't work. ... anyhow, package_key seems not be used here

- move comment to the right place

- Implements "Upgrade Insecure Requests" headers:

W3C Candidate Recommendation

https://www.w3.org/TR/upgrade-insecure-requests/

- added kernel parameter MaxUrlLength (default 2000) to remove

hard-coded length in request-processor-procs.

- lifted data model restriction of 100 characters for url-segments

(changing types of "site_nodes.name" from "varchar(100)" to "text")

(PostgreSQL only)

- site_node__node_id

* use built-in string functions instead of characterwise loop

* use default for last argument

* Improve source-code documentation

- bumped version number of kernel to 5.9.1d15

  1. … 3 more files in changeset.
Improving root_of_host_

- reduce dependency of the paths in the configuration script

- treat not only http, but as well https locations

- improve comments

- don't complain in rp_lookup_node_from_host when pass-in host is emtpy (return empty node_id as well)

- removed escaped testing code

- regenerated documentation to fix escaping problem in docbook: when a "programlisting" contains a message key, it is properly escaped when putting a ­ after the first hash

  1. … 124 more files in changeset.
- improve behavior on invalid host headers and comment the purpose in more detail

  1. … 1 more file in changeset.
- terminate filter with filter_return when errors occur

- fix error message

- return for unset host entry ""

- add validation against invalid host header fields

  1. … 3 more files in changeset.
- use filter_return to terminate filter on errors

- return complaint in case of invalid lanuguage setup

- don't swallow sliently exceptions

- reject requests where host contains invalid characters