iOS 14 / macOS 11 and HTTP/3 support

2020-06-22 Thread Alex Hautequest
From Apple’s developer beta release notes, the newest Apple code is now shipping with HTTP/3 support. Disabled by default, but can be enabled by users. As of today, HTTP/3 Draft 29 isn’t yet supported. Alex

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread Yann Ylavic
On Mon, Jun 22, 2020 at 12:13 PM jean-frederic clere wrote: > > >> > >> But there is still something I want to prevent: > >> ProxyPass /docs ajp://localhost:8009/docs > >> and url like: > >> curl -v --path-as-is > >> "http://localhost:8000/docs/..;food=bar/test/index.jsp; > >> How do we do

Passed: apache/httpd#855 (trunk - d884808)

2020-06-22 Thread Travis CI
Build Update for apache/httpd - Build: #855 Status: Passed Duration: 12 mins and 40 secs Commit: d884808 (trunk) Author: Yann Ylavic Message: Allow for proxy servlet mapping at pre_translate_name stage. Provide alias_match_servlet(), the servlet counterpart

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread Yann Ylavic
On Mon, Jun 22, 2020 at 12:33 PM jean-frederic clere wrote: > > On 22/06/2020 12:23, Yann Ylavic wrote: > > On Mon, Jun 22, 2020 at 12:13 PM jean-frederic clere > > wrote: > >> > > But there is still something I want to prevent: > ProxyPass /docs ajp://localhost:8009/docs >

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread Yann Ylavic
On Mon, Jun 22, 2020 at 11:20 AM jean-frederic clere wrote: > > On 19/06/2020 12:02, Yann Ylavic wrote: > > On Thu, Jun 18, 2020 at 6:37 PM jean-frederic clere > > wrote: > >> > >> ProxyMappingDecoded Off > >> ProxyPass /test ajp://localhost:8009/test secret=%A1b2!@ mapping=servlet > > [] >

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread jean-frederic clere
On 22/06/2020 12:23, Yann Ylavic wrote: On Mon, Jun 22, 2020 at 12:13 PM jean-frederic clere wrote: But there is still something I want to prevent: ProxyPass /docs ajp://localhost:8009/docs and url like: curl -v --path-as-is "http://localhost:8000/docs/..;food=bar/test/index.jsp; How do we

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread jean-frederic clere
On 22/06/2020 11:50, Yann Ylavic wrote: On Mon, Jun 22, 2020 at 11:20 AM jean-frederic clere wrote: On 19/06/2020 12:02, Yann Ylavic wrote: On Thu, Jun 18, 2020 at 6:37 PM jean-frederic clere wrote: ProxyMappingDecoded Off ProxyPass /test ajp://localhost:8009/test secret=%A1b2!@

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread jean-frederic clere
On 19/06/2020 12:02, Yann Ylavic wrote: On Thu, Jun 18, 2020 at 6:37 PM jean-frederic clere wrote: ProxyMappingDecoded Off ProxyPass /test ajp://localhost:8009/test secret=%A1b2!@ mapping=servlet [] what is going wrong with "http://localhost:8000/docs/..;food=bar/test;food=bar/index.jsp;

pre_translate_name hook vs location/directory walk (was: svn commit: r1879079)

2020-06-22 Thread Yann Ylavic
> Allow for URI-path pre_translate_name before (and/or instead of) decoding. > > Only if no hook takes "ownership" of the URI (returning OK), apply > percent decoding for the rest of request handling. Otherwise r->uri remains > encoded meaning that further location/directory/file/if/.. sections

Re: pre_translate_name hook vs location/directory walk (was: svn commit: r1879079)

2020-06-22 Thread Yann Ylavic
On Mon, Jun 22, 2020 at 2:28 PM Yann Ylavic wrote: > > Also, since we are at it, I'm on the fence about running the > pre_translate hooks before quick handlers (thus before > ap_process_request_internal() too), good or bad idea? Sorry, I meant running the *normalization* (including decoding

Re: pre_translate_name hook vs location/directory walk (was: svn commit: r1879079)

2020-06-22 Thread Eric Covener
On Mon, Jun 22, 2020 at 8:28 AM Yann Ylavic wrote: > > > Allow for URI-path pre_translate_name before (and/or instead of) decoding. > > > > Only if no hook takes "ownership" of the URI (returning OK), apply > > percent decoding for the rest of request handling. Otherwise r->uri remains > >

Re: mod_proxy_fcgi bug using CONTENT_LENGTH and Transfer-Encoding chunked

2020-06-22 Thread Oliver Dunk
Just wanted to resurface this one. I posted it last week, but there hasn’t been any activity yet. I’d still love someone to take a look if they have a minute. Kind regards, Oliver > On 16 Jun 2020, at 22:57, Oliver Dunk wrote: > > Hi, > > I wanted to politely ask if anyone could take a look

Re: svn commit: r1879076 - in /httpd/httpd/trunk: include/ap_mmn.h include/http_request.h server/request.c

2020-06-22 Thread Eric Covener
On Mon, Jun 22, 2020 at 6:32 AM wrote: > > Author: ylavic > Date: Mon Jun 22 10:32:15 2020 > New Revision: 1879076 > > URL: http://svn.apache.org/viewvc?rev=1879076=rev > Log: > Add pre_translate_name hook running before URI-path decoding. > > This allows any module to work with un-decoded

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread Eric Covener
> You need to set: > ProxyMappingDecoded off > in your vhost (or directory) for servlet mapping to be active, with a Does it work in directory context? pre_trans is before location_walk.

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread Yann Ylavic
On Mon, Jun 22, 2020 at 2:44 PM Eric Covener wrote: > > > You need to set: > > ProxyMappingDecoded off > > in your vhost (or directory) for servlet mapping to be active, with a > > Does it work in directory context? pre_trans is before location_walk. Argh no, didn't think of it :/ For this

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread jean-frederic clere
On 22/06/2020 16:12, Yann Ylavic wrote: On Mon, Jun 22, 2020 at 2:44 PM Eric Covener wrote: You need to set: ProxyMappingDecoded off in your vhost (or directory) for servlet mapping to be active, with a Does it work in directory context? pre_trans is before location_walk. Argh no,

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread Yann Ylavic
On Mon, Jun 22, 2020 at 5:04 PM jean-frederic clere wrote: > > On 22/06/2020 16:12, Yann Ylavic wrote: > > On Mon, Jun 22, 2020 at 2:44 PM Eric Covener wrote: > >> > >>> You need to set: > >>> ProxyMappingDecoded off > >>> in your vhost (or directory) for servlet mapping to be active, with

Re: hardening mod_write and mod_proxy like mod_jk with servletnormalize

2020-06-22 Thread jean-frederic clere
On 22/06/2020 13:02, Yann Ylavic wrote: On Mon, Jun 22, 2020 at 12:33 PM jean-frederic clere wrote: On 22/06/2020 12:23, Yann Ylavic wrote: On Mon, Jun 22, 2020 at 12:13 PM jean-frederic clere wrote: But there is still something I want to prevent: ProxyPass /docs

Re: pre_translate_name hook vs location/directory walk (was: svn commit: r1879079)

2020-06-22 Thread Yann Ylavic
On Mon, Jun 22, 2020 at 2:57 PM Eric Covener wrote: > > On Mon, Jun 22, 2020 at 8:28 AM Yann Ylavic wrote: > > > > > Allow for URI-path pre_translate_name before (and/or instead of) decoding. > > > > > > Only if no hook takes "ownership" of the URI (returning OK), apply > > > percent decoding