Re: 3.0 - Proposed Goals

2007-02-21 Thread Sander Temme


On Feb 19, 2007, at 12:51 PM, Roy T. Fielding wrote:


We work best as a collaboration when we give people the freedom to
explore their own personal wild ideas (or even just reasonable ideas
for which the solution has no clear timeline).  If we artificially
constrain the scope of what can be done based on the group's a priori
perception, then we effectively go nowhere new (because collectives
fear the new).


I really like Roy's comment.  Yes, let's hack!  When the time comes,  
we can close the loop on the module API and get with the third party  
guys.


S.

--
[EMAIL PROTECTED]http://www.temme.net/sander/
PGP FP: 51B4 8727 466A 0BC3 69F4  B7B8 B2BE BC40 1529 24AF




smime.p7s
Description: S/MIME cryptographic signature


issue when browser sends server-side image map info

2007-02-21 Thread Jonathan Vanasco


1) Yes, I know server-side image maps are 1996.  But they're still  
part of the HTML spec , and not deprecated



http://www.w3.org/TR/html401/struct/objects.html#h-13.6.2

	The location clicked is passed to the server as follows. The user  
agent derives a new URI from the URI specified by the href attribute  
of the A element, by appending `?' followed by the x and y  
coordinates, separated by a comma. The link is then followed using  
the new URI. For instance, in the given example, if the user clicks  
at the location x=10, y=27 then the derived URI is http:// 
www.acme.com/cgi-bin/competition?10,27.
	User agents that do not offer the user a means to select specific  
coordinates (e.g., non-graphical user agents that rely on keyboard  
input, speech-based user agents, etc.) should send the coordinates  
0,0 to the server when the link is activated.



2) The issue:

lets say we have this url :

http://www.acme.com/cgi-bin/competition

it gets rewritten as:

http://www.acme.com/cgi-bin/competition?10,27

but, if we have this url:

http://www.acme.com/cgi-bin/competition?token=a

it gets rewritten as:

http://www.acme.com/cgi-bin/competition?token=a?10,27

which then kills the parser --

print $apr-param('token')
a?10,27

i think the spirit of the spec was to have
http://www.acme.com/cgi-bin/competition?10,27token=a
but the language and implementations give
http://www.acme.com/cgi-bin/competition?token=a?10,27

which will break just about every param knon to man.

	i know this isn't a 'bug' -- its because the HTTP rfc and HTML spec  
have this glaring discrepancy.


that said, i think it would be nice if libapreq would remove
\?(\d*),(\d*)$

from uris before parsing...

	and perhaps make that info available by another function ? (i strip  
it out with regex off an unparsed URI already , so that would just be  
icing on the cake )




// Jonathan Vanasco

| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
- - - - - - - - - - - - - - - - - - -

| SyndiClick.com
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
- - - - - - - - - - - - - - - - - - -

|  FindMeOn.com - The cure for Multiple Web Personality Disorder
|  Web Identity Management and 3D Social Networking
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
- - - - - - - - - - - - - - - - - - -

|  RoadSound.com - Tools For Bands, Stuff For Fans
|  Collaborative Online Management And Syndication Tools
| - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -  
- - - - - - - - - - - - - - - - - - -





Handling Transfer-Encoding: chunked for Post requests.

2007-02-21 Thread Clark Rawlins
Hello,

I have a client I need to handle post requests for that uses
Content-Encoding: xml and Transfer-Encoding: chunked.

Now the Content-Encoding is no problem I plan on using sax to parse the
content.  The chunked transfer encoding is where I have run into issues.

I tracked it down to the part of the mod-python code that handles
reading the request body from apache.

In two places it uses:
rc = ap_setup_client_block(self-request_rec, REQUEST_CHUNKED_ERROR);

As a test, I modified the code to use REQUEST_CHUNKED_DECHUNK and it
worked great for me.  Now I imagine that this may cause some problems
for scripts using mod-python to handle requests but I couldn't think of
any that wouldn't already be quite serious with a request of MAX_INT
length.  What if anything am I missing and if I am not, could this
change be incorporated into the main tree?

Clark

Index: src/requestobject.c
===
--- src/requestobject.c (revision 510030)
+++ src/requestobject.c (working copy)
@@ -864,7 +864,7 @@
 if (! self-request_rec-read_length) {
 
 /* then do some initial setting up */
-rc = ap_setup_client_block(self-request_rec, REQUEST_CHUNKED_ERROR);
+rc = ap_setup_client_block(self-request_rec, REQUEST_CHUNKED_DECHUNK);
 if(rc != OK) {
 PyObject *val = PyInt_FromLong(rc);
 if (val == NULL)
@@ -964,7 +964,7 @@
 if (! self-request_rec-read_length) {
 
 /* then do some initial setting up */
-rc = ap_setup_client_block(self-request_rec, REQUEST_CHUNKED_ERROR);
+rc = ap_setup_client_block(self-request_rec, REQUEST_CHUNKED_DECHUNK);
 
 if (rc != OK) {
 PyObject *val = PyInt_FromLong(rc);



[STATUS] (httpd-trunk) Wed Feb 21 23:49:56 2007

2007-02-21 Thread Rodent of Unusual Size
APACHE 2.3 STATUS:  -*-text-*-
Last modified at [$Date: 2006-08-22 16:41:03 -0400 (Tue, 22 Aug 2006) $]

The current version of this file can be found at:

  * http://svn.apache.org/repos/asf/httpd/httpd/trunk/STATUS

Documentation status is maintained seperately and can be found at:

  * docs/STATUS in this source tree, or
  * http://svn.apache.org/repos/asf/httpd/httpd/trunk/docs/STATUS

Consult the following STATUS files for information on related projects:

  * http://svn.apache.org/repos/asf/apr/apr/trunk/STATUS
  * http://svn.apache.org/repos/asf/apr/apr-util/trunk/STATUS

Patches considered for backport are noted in their branches' STATUS:

  * http://svn.apache.org/repos/asf/httpd/httpd/branches/1.3.x/STATUS
  * http://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x/STATUS
  * http://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x/STATUS


Release history:
[NOTE that x.{odd}.z versions are strictly Alpha/Beta releases,
  while x.{even}.z versions are Stable/GA releases.]

2.3.0   : in development


Contributors looking for a mission:

* Just do an egrep on TODO or XXX in the source.

* Review the bug database at: http://issues.apache.org/bugzilla/

* Review the PatchAvailable bugs in the bug database:

  
https://issues.apache.org/bugzilla/buglist.cgi?bug_status=NEWbug_status=ASSIGNEDbug_status=REOPENEDproduct=Apache+httpd-2keywords=PatchAvailable

  After testing, you can append a comment saying Reviewed and tested.

* Open bugs in the bug database.


CURRENT RELEASE NOTES:


RELEASE SHOWSTOPPERS:

* Handling of non-trailing / config by non-default handler is broken
  http://marc.theaimsgroup.com/?l=apache-httpd-devm=105451701628081w=2
  jerenkrantz asks: Why should this block a release?
  wsanchez agrees: this may be a change in behavior, but isn't
clearly wrong, and even if so, it doesn't seem like a
showstopper.

* the edge connection filter cannot be removed 
  http://marc.theaimsgroup.com/?l=apache-httpd-devm=105366252619530w=2

  jerenkrantz asks: Why should this block a release?

  stas replies: because it requires a rewrite of the filters stack
implementation (you have suggested that) and once 2.2 is
released you can't do that anymore. 


CURRENT VOTES:

* If the parent process dies, should the remaining child processes
  gracefully self-terminate. Or maybe we should make it a runtime
  option, or have a concept of 2 parent processes (one being a 
  hot spare).
  See: Message-ID: [EMAIL PROTECTED]

  Self-destruct: Ken, Martin, Lars
  Not self-destruct: BrianP, Ian, Cliff, BillS
  Make it runtime configurable: Aaron, jim, Justin, wrowe, rederpj, nd

  /* The below was a concept on *how* to handle the problem */
  Have 2 parents: +1: jim
  -1: Justin, wrowe, rederpj, nd
  +0: Lars, Martin (while standing by, could it do
something useful?)

* Make the worker MPM the default MPM for threaded Unix boxes.
  +1:   Justin, Ian, Cliff, BillS, striker, wrowe, nd
  +0:   BrianP, Aaron (mutex contention is looking better with the
latest code, let's continue tuning and testing), rederpj, jim
  -0:   Lars

  pquerna: Do we want to change this for 2.2?


RELEASE NON-SHOWSTOPPERS BUT WOULD BE REAL NICE TO WRAP THESE UP:

* Patches submitted to the bug database:
  
http://issues.apache.org/bugzilla/buglist.cgi?bug_status=NEWbug_status=ASSIGNEDbug_status=REOPENEDproduct=Apache+httpd-2keywords=PatchAvailable

* Filter stacks and subrequests, redirects and fast redirects.
  There's at least one PR that suffers from the current unclean behaviour
  (which lets the server send garbage): PR 17629
  nd says: Every subrequest should get its own filter stack with the
   subreq_core filter as bottom-most. That filter does two things:
 - swallow EOS buckets
 - redirect the data stream to the upper request's (rr-main)
   filter chain directly after the subrequest's starting
   point.
   Once we have a clean solution, we can try to optimize
   it, so that the server won't be slow down too much.

* RFC 2616 violations.
  Closed PRs: 15857.
  Open PRs: 15852, 15859, 15861, 15864, 15865, 15866, 15868, 15869,
15870, 16120, 16125, 16126, 16133, 16135, 16136, 16137,
16138, 16139, 16140, 16142, 16518, 16520, 16521, 
  jerenkrantz says: need to decide how many we need to backport and/or
if these rise to showstopper status.
  wrowe suggests: it would be nice to see MUST v.s. SHOULD v.s. MAY
  out of this list, without reviewing them individually.

* There is a bug in how we sort some hooks, at 

[STATUS] (httpd-2.0) Wed Feb 21 23:51:20 2007

2007-02-21 Thread Rodent of Unusual Size
APACHE 2.0 STATUS:  -*-text-*-
Last modified at [$Date: 2007-02-16 15:40:35 -0500 (Fri, 16 Feb 2007) $]

The current version of this file can be found at:

  * http://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x/STATUS

Documentation status is maintained seperately and can be found at:

  * docs/STATUS in this source tree, or
  * http://svn.apache.org/repos/asf/httpd/httpd/branches/2.0.x/docs/STATUS

Consult the following STATUS files for information on related projects:

  * http://svn.apache.org/repos/asf/apr/apr/branches/0.9.x/STATUS
  * http://svn.apache.org/repos/asf/apr/apr-util/branches/0.9.x/STATUS

Consult the trunk/ for all new development and documentation efforts:

  * http://svn.apache.org/repos/asf/httpd/httpd/trunk/STATUS
  * http://svn.apache.org/repos/asf/httpd/httpd/trunk/docs/STATUS


Release history:

2.0.60  : in maintenance
2.0.59  : released July 28, 2006 as GA.
2.0.58  : released May 1, 2006 as GA. 
2.0.57  : tagged April 19, 2006, not released.
2.0.56  : tagged April 16, 2006, not released.
2.0.55  : released October 16, 2005 as GA.
2.0.54  : released April 17, 2005 as GA.
2.0.53  : released February 7, 2005 as GA.
2.0.52  : released September 28, 2004 as GA.
2.0.51  : released September 15, 2004 as GA.
2.0.50  : released June 30, 2004 as GA.
2.0.49  : released March 19, 2004 as GA.
2.0.48  : released October 29, 2003 as GA.
2.0.47  : released July 09, 2003 as GA.
2.0.46  : released May 28, 2003 as GA.
2.0.45  : released April 1, 2003 as GA.
2.0.44  : released January 20, 2003 as GA.
2.0.43  : released October 3, 2002 as GA.
2.0.42  : released September 24, 2002 as GA.
2.0.41  : rolled September 16, 2002.  not released.
2.0.40  : released August 9, 2002 as GA.
2.0.39  : released June 17, 2002 as GA.
2.0.38  : rolled June 16, 2002.  not released.
2.0.37  : rolled June 11, 2002.  not released.
2.0.36  : released May 6, 2002 as GA.
2.0.35  : released April 5, 2002 as GA.
2.0.34  : tagged March 26, 2002.
2.0.33  : tagged March 6, 2002.  not released.
2.0.32  : released Feburary 16, 2002 as beta.
2.0.31  : rolled Feburary 1, 2002.  not released.
2.0.30  : tagged January 8, 2002.  not rolled.
2.0.29  : tagged November 27, 2001.  not rolled.
2.0.28  : released November 13, 2001 as beta.
2.0.27  : rolled November 6, 2001
2.0.26  : tagged October 16, 2001.  not rolled.
2.0.25  : rolled August 29, 2001
2.0.24  : rolled August 18, 2001
2.0.23  : rolled August 9, 2001
2.0.22  : rolled July 29, 2001
2.0.21  : rolled July 20, 2001
2.0.20  : rolled July 8, 2001
2.0.19  : rolled June 27, 2001
2.0.18  : rolled May 18, 2001
2.0.17  : rolled April 17, 2001
2.0.16  : rolled April 4, 2001
2.0.15  : rolled March 21, 2001
2.0.14  : rolled March 7, 2001
2.0a9   : released December 12, 2000
2.0a8   : released November 20, 2000
2.0a7   : released October 8, 2000
2.0a6   : released August 18, 2000
2.0a5   : released August 4, 2000
2.0a4   : released June 7, 2000
2.0a3   : released April 28, 2000
2.0a2   : released March 31, 2000
2.0a1   : released March 10, 2000


Contributors looking for a mission:

* Just do an egrep on TODO or XXX in the source.

* Review the bug database at: http://issues.apache.org/bugzilla/

* Review the PatchAvailable bugs in the bug database:

  
http://issues.apache.org/bugzilla/buglist.cgi?bug_status=NEWbug_status=ASSIGNEDbug_status=REOPENEDproduct=Apache+httpd-2.0keywords=PatchAvailable

  After testing, you can append a comment saying Reviewed and tested.

* Open bugs in the bug database.


CURRENT RELEASE NOTES:

* Forward binary compatibility is expected of Apache 2.0.x releases, such
  that no MMN major number changes will occur.  Such changes can only be
  made in the trunk.

* All commits to branches/2.0.x must be reflected in SVN trunk,
  as well, if they apply.  Logical progression is commit to trunk,
  get feedback and votes on list or in STATUS, then merge into 
  branches/2.2.x, and finally merge into branches/2.0.x, as applicable.


RELEASE SHOWSTOPPERS:

* mod_proxy: ProxyTimeout (and others) ignored due to not merging
  the *_set params.
  PR# 11540
  Trunk version of patch:
 http://svn.apache.org/viewvc?view=revrevision=507516
  2.0 version:
 http://people.apache.org/~jim/patches/httpd-2.0-proxy.patch
  +1: jim, minfrin

PATCHES ACCEPTED TO BACKPORT FROM TRUNK:
  [ start all new proposals below, under PATCHES PROPOSED. ]

PATCHES PROPOSED TO BACKPORT FROM TRUNK:
  [ please place SVN revisions from trunk here, so it is easy to
identify exactly what the proposed changes are!  Add all new
proposals to the end of this list. ]

*) Reverse Proxy fixes: Location bug and Cookie support
Patch