Christian Grothoff
d2375954a1
releasing v1.0.5
2026-04-16 10:38:04 +02:00
Evgeny Grin (Karlson2k)
9933d65464
Tighten request header processing to match RFC
...
New implementation:
+ rejects repeated Host: headers
+ handles repeated Content-Length: more carefully
+ handles malformed Content-Length: better
+ handles repeated Transfer-Encoding: headers
+ parses all Cookie: headers instead of just first header
+ handles properly Transfer-Encoding: in HTTP/1.0 requests
2026-04-15 21:35:12 +02:00
Evgeny Grin (Karlson2k)
a7f6ad8f4f
test_mhd_version.c: corrected output
2026-04-14 19:55:27 +02:00
Evgeny Grin (Karlson2k)
a083613d84
Fixed checking headers longer than actually needed
...
The prevents matching header like "Content-Length-Anything:" as
"Content-Length:" header.
2026-04-14 19:39:50 +02:00
Evgeny Grin (Karlson2k)
0d33a88f35
Bump MHD_VERSION to indicate development version
2026-04-14 19:33:13 +02:00
Evgeny Grin (Karlson2k)
4f049186bf
Fixed missing MHD_VERSION bump
2026-04-14 19:32:32 +02:00
Christian Grothoff
c345fa6474
enable content-length duplicate check at default discipline level
2026-04-10 11:54:53 +02:00
Christian Grothoff
f07e09b7dc
add code to reject requests with multiple Content-Length HTTP headers being sent by the client; thanks to SYSS.de for reporting
2026-04-07 17:54:42 +02:00
Christian Grothoff
5f207ceede
fix bug in list traversal that could cause ready connections to be skipped if other connections were suspended
2026-04-02 00:18:18 +02:00
Evgeny Grin (Karlson2k)
1e43edd529
Request chunk processing: reject bare CR in chunk extension
2026-03-01 00:23:07 +01:00
Evgeny Grin (Karlson2k)
ff26d02aa0
Request chunk processing: simplified check for overflow
2026-03-01 00:19:22 +01:00
Evgeny Grin (Karlson2k)
ec6e6d2888
Added MHD_OPTION_ALLOW_BIN_ZERO_IN_URI_PATH and MHD_get_connection_URI_path_n()
2026-02-28 23:39:20 +01:00
Evgeny Grin (Karlson2k)
db3d2d32f5
connection.c: improved macro to avoid duplication of error messages macros
2026-02-28 23:34:05 +01:00
Evgeny Grin (Karlson2k)
a868dbc897
Chunks parsing: corrected inverted discipline match
2026-02-27 19:20:23 +01:00
Christian Grothoff
deae6d4e09
fix indentation
2025-10-12 10:57:21 +02:00
Evgeny Grin (Karlson2k)
b03f13f32c
test_get_close_keep_alive: a minimal fix for curl 8.16
...
curl 8.16 is silently dropping second 'Connection: ' header from
requests, making some of the checks in the test unreliable.
See https://bugs.gnunet.org/view.php?id=10403
2025-09-21 16:20:49 +02:00
Evgeny Grin (Karlson2k)
391ee4df3c
test_get_close_keep_alive: improved reports readability
2025-09-21 16:16:19 +02:00
Christian Grothoff
d6444b0ad9
fix #9634 : ensure http header field names are restricted to 'token' character set as per RFC 9110
2025-09-20 12:15:51 +02:00
Christian Grothoff
6f4fd04bed
more DCE
2025-09-20 11:46:04 +02:00
Christian Grothoff
593bac45c2
remove websocket examples
2025-09-16 11:08:31 +02:00
Christian Grothoff
ff13abc1c1
remove broken experimental code
2025-09-16 11:00:37 +02:00
Christian Grothoff
f2e3bbda41
-bump header version
2025-07-14 17:09:42 +02:00
Christian Grothoff
ebe728629c
fix double-close() bug reported by MC on the mailinglist
2025-07-14 17:06:25 +02:00
Evgeny Grin (Karlson2k)
72c8b0db78
perf_replies: minor readability improvement
2025-06-14 19:19:50 +02:00
Evgeny Grin (Karlson2k)
00e0ca7418
perf_replies: corrected comments and messages
2025-06-14 19:19:35 +02:00
Evgeny Grin (Karlson2k)
b6996ff321
perf_replies: backported larger replies
2025-06-14 19:19:13 +02:00
Christian Grothoff
c5c822fdbe
add json_echo example
2025-05-13 08:42:23 +02:00
Evgeny Grin (Karlson2k)
c372caeb3c
test_timeout: more detailed libcurl error report
2025-04-12 19:45:47 +03:00
Evgeny Grin (Karlson2k)
6e730f1ef4
test_timeout: a minimal fix for libcurl changes
2025-04-12 19:44:28 +03:00
Evgeny Grin (Karlson2k)
0994a26250
test_tricky: updated to better use libcurl API
2025-04-11 20:26:54 +03:00
Evgeny Grin (Karlson2k)
036f8fdec2
test_tricky.c: applied a minimal fix for the libcurl >= 8.13.0
2025-04-11 20:13:48 +03:00
Evgeny Grin (Karlson2k)
d94229422f
digestauth: fixed log message when wrong value used and MHD has some
...
hashing algorithms disabled.
2024-07-31 13:28:09 +02:00
Evgeny Grin (Karlson2k)
26d501f796
test_client_put_stop: adapted test for GNU Hurd kernel
2024-07-31 13:21:02 +02:00
Evgeny Grin (Karlson2k)
6ff9f5067a
test_upgrade: removed duplicated include
...
Reported by Martin Strunz (maddin200)
2024-07-25 15:26:20 +02:00
Evgeny Grin (Karlson2k)
eb3725dc3a
digestauth: explicitly reject unsupported algorithm requested by application
2024-07-25 15:23:11 +02:00
Evgeny Grin (Karlson2k)
a00142f004
digestauth: fixed bits manipulations
...
No functional change as the rest of the code does not support sessions.
Reported by Martin Strunz (maddin200)
2024-07-25 15:23:11 +02:00
Evgeny Grin (Karlson2k)
668fbd286f
test_str_bin_hex: fixed reporting
2024-06-15 13:00:41 +02:00
Evgeny Grin (Karlson2k)
d15de502ef
mhd_str.c: fixed logic when built without 'inline'
2024-06-15 12:59:24 +02:00
Evgeny Grin (Karlson2k)
861d252ed5
mhd_str.c: synced macros names with recent configure changes
2024-06-15 12:57:58 +02:00
Evgeny Grin (Karlson2k)
2534aab3f9
W32 resources: reworked, added support for the static lib resources
2024-06-05 15:02:32 +02:00
Evgeny Grin (Karlson2k)
927c269733
Fixed deprecation message when building the lib
2024-04-28 21:04:33 +02:00
Evgeny Grin (Karlson2k)
5bd638aee2
microhttpd.h: fixed deprecation messages
2024-04-28 21:03:12 +02:00
Мяделец Андрей Алексеевич
44db29ca76
src/examples/demo{,_https}: fix response buffer overwriting
...
Adding address offset when copying string.
The code was broken by 5821a7f3 ("src/examples/demo{,_https}: added some error
checking, fixed compiler warnings").
2024-04-22 13:11:19 +02:00
Evgeny Grin (Karlson2k)
2e14003ebb
microhttpd.h: workaround for uncrustify bug
2024-04-11 18:29:56 +02:00
Evgeny Grin (Karlson2k)
4e056c9794
microhttpd.h: fixed feature name
2024-04-11 18:28:44 +02:00
Evgeny Grin (Karlson2k)
fd498a7064
Bump MHD_VERSION to indicate development version
2024-04-11 18:24:09 +02:00
Evgeny Grin (Karlson2k)
3aee48fd77
Releasing GNU libmicrohttpd 1.0.1
2024-02-23 21:22:58 +05:00
Evgeny Grin (Karlson2k)
71c543f409
digestauth: fixed compiler warnings
2024-02-21 19:49:57 +05:00
Evgeny Grin (Karlson2k)
4e2f9fd9e9
Fixed compiler warnings for builds without Digest Auth
2024-02-21 18:36:29 +05:00
Evgeny Grin (Karlson2k)
efe16e4891
Muted possible compiler warnings
2024-02-21 18:34:52 +05:00