summaryrefslogtreecommitdiffstats
AgeCommit message (Expand)Author
2026-08-24Merge commit 'refs/pull/34/head' of https://github.com/openwrt/uhttpdHEADmasterJo-Philipp Wich
2026-08-24file: enforce Basic Auth realms for URL-prefix handlersHauke Mehrtens
2026-08-05client: set TCP_NODELAY on accepted socketsIvan Kvashonkin
2026-08-03tls: add SNI-based redirect supportJo-Philipp Wich
2026-08-03lua, ucode: use buffered stdio for script outputJo-Philipp Wich
2026-08-03file: dereference symlinks when looking up MIME typeJo-Philipp Wich
2026-08-03utils: strip trailing whitespace from header field-valuesJo-Philipp Wich
2026-08-03ubus: release client refcount on successful /ubus/subscribeJo-Philipp Wich
2026-08-03client: move unread-body guard into uh_request_done()Jo-Philipp Wich
2026-08-03ubus: set d->free unconditionally to fix url_path leakJo-Philipp Wich
2026-08-03ubus: guard params type in uh_ubus_send_request()Jo-Philipp Wich
2026-07-24client: parse and discard chunked trailer sections, use enum chunked_stateJo-Philipp Wich
2026-07-24http: further consolidate character classification and header parsingJo-Philipp Wich
2026-07-24http: use chartypes table consistently, drop ctype.hJo-Philipp Wich
2026-07-24client: reject invalid header names to prevent request smugglingJo-Philipp Wich
2026-07-24client: fix parse_chunksize() return type and stale commentJo-Philipp Wich
2026-07-24client: use strict chunk size parsing to fix issue #3Jo-Philipp Wich
2026-07-23client: reject empty chunk size lines in chunked transfer parsingJo-Philipp Wich
2026-07-23listen: set IP_FREEBIND so binding to a not-yet-present address worksDeven Ducommun
2026-07-23client: verify chunk data is followed by CRLF before resyncingJo-Philipp Wich
2026-07-23client: cap cumulative header count and bytes per requestJo-Philipp Wich
2026-06-15ubus: close connection on POST body parse errorHauke Mehrtens
2026-06-15client: close connection on invalid chunk lengthHauke Mehrtens
2026-06-15client: reject unhandled Transfer-Encoding valuesHauke Mehrtens
2026-05-20auth: classify $p$ lookups by account stateHauke Mehrtens
2026-05-20cgi, file: fix crash due to field_len type mismatch with libuboxAndy Chiang
2026-05-15auth: replace strcmp with constant-time password comparisonHauke Mehrtens
2026-05-15auth: do not accept stored crypt hash as plaintext passwordHauke Mehrtens
2026-05-15client: parse chunked transfer chunk size safelyHauke Mehrtens
2026-05-15client: parse Content-Length safelyHauke Mehrtens
2026-05-15main: fix daemonization stdio redirection and fd leakHauke Mehrtens
2026-05-15utils: fix off-by-one out-of-bounds read in uh_b64decodeHauke Mehrtens
2026-05-15utils: remove unreachable return statement in uh_addr_rfc1918Hauke Mehrtens
2026-05-15file: bail out of file_write_cb on read errorHauke Mehrtens
2026-05-15utils: fix one-byte overflow in uh_urldecodeHauke Mehrtens
2026-05-15file: distinguish parse failure from epoch in date precondition checksHauke Mehrtens
2026-05-15file: respond 500 on uh_handle_alias OOMHauke Mehrtens
2026-05-15utils, client: cast char to unsigned before passing to ctype functionsHauke Mehrtens
2026-05-15proc: store CGI Status message per-client instead of in a shared bufferHauke Mehrtens
2026-05-03ucode: initialize module search path only onceHauke Mehrtens
2026-05-03proc: restore default SIGPIPE disposition in spawned childHauke Mehrtens
2026-05-03file: scan all entries when matching If-Match / If-None-MatchHauke Mehrtens
2026-05-03client: match Host and URL attributes exactly in tls_redirect_checkHauke Mehrtens
2026-05-03client: prevent transfer_chunked counter overflowHauke Mehrtens
2026-04-16client: use base-10 parsing for Content-Length headerPaul Spooren
2025-12-24ubus: unregister ubus subscriber on HTTP client disconnectTito Brasolin
2025-10-03CMakeLists: update cmake minimum required version to 3.10Christian Marangi
2025-07-06client: Allow sending content in DONE stateHauke Mehrtens
2025-04-05client: reject requests with multiple content-lengths and/or TEsJo-Philipp Wich
2025-04-05file: prevent writes beyond end of uh_buf on enumerating directoriesJo-Philipp Wich