|
|
c85df7cd26
|
Make the improvement consistent with password verification function
|
2024-03-17 10:20:00 +01:00 |
|
|
|
32a92804fa
|
Improve protection against user enumeration
|
2024-03-17 10:17:53 +01:00 |
|
|
|
184060fb79
|
Modified HTTP authentication functionality
|
2024-03-17 10:00:01 +01:00 |
|
|
|
7857e0e2fa
|
Optimize non-standard code functionality
|
2024-03-17 09:30:26 +01:00 |
|
|
|
3493aa4d2d
|
Remove <nocode> (non-standard) tags for bad (broken) directory listing entries
|
2024-03-17 00:59:53 +01:00 |
|
|
|
f1c74cb036
|
Optimized bad (broken) entry generation in directory listing
|
2024-03-17 00:57:47 +01:00 |
|
|
|
c44c796253
|
Optimized some request parameter logging
|
2024-03-17 00:54:47 +01:00 |
|
|
|
db621d9a88
|
Add more use of status code names in http.STATUS_CODES
|
2024-03-17 00:51:34 +01:00 |
|
|
|
4a09b14ff2
|
Change log message for client being in block list
|
2024-03-17 00:48:21 +01:00 |
|
|
|
ba21f655a4
|
Replaced client in the block list error message with generic 403 Forbidden error message
|
2024-03-17 00:46:32 +01:00 |
|
|
|
28244bf2c5
|
Replace some instances of "blacklist" (racist?) with "block list"
|
2024-03-17 00:39:21 +01:00 |
|
|
|
37f3d1d2af
|
Changed CVE-2024-22019 warning text
|
2024-03-17 00:35:44 +01:00 |
|
|
|
e638c5dc1a
|
Added CVE-2024-22019 Node.JS vulnerability warning.
|
2024-03-13 03:00:56 +01:00 |
|
|
|
1e165dcc58
|
Fix wwwredirect function
|
2024-03-09 16:32:01 +01:00 |
|
|
|
52e729f51d
|
Optimize HTTP/1.x compatiblity res.writeHead function
|
2024-03-09 16:10:41 +01:00 |
|
|
|
0e44109776
|
Change error handler for missing HTTP/2 pseudoheaders
|
2024-03-09 16:08:46 +01:00 |
|
|
|
7b0038754e
|
Optimize HTTP/1.x compatibility header setting
|
2024-03-09 16:00:19 +01:00 |
|
|
|
6c8873ce3f
|
Fix comparison optimized in the previous commit
|
2024-03-09 15:57:56 +01:00 |
|
|
|
4a24b9d892
|
Be case insensitive in header name exclusion in shimmed HTTP/1.x res.writeHead method
|
2024-03-09 15:57:30 +01:00 |
|
|
|
70444f3b48
|
Optimize missing header check
|
2024-03-09 15:50:36 +01:00 |
|
|
|
9f8b0f4fe3
|
Remove try/catch block in HTTP/1.x compatibility shim; errors there are non-existent
|
2024-03-09 15:48:23 +01:00 |
|
|
|
8ac546ff67
|
Be case insensitive in header name exclusion in shimmed HTTP/1.x res.setHeader method
|
2024-03-09 15:45:31 +01:00 |
|
|
|
9017b732cc
|
Clean up the code.
|
2024-03-03 02:05:14 +01:00 |
|
|
|
c20aa3d7bc
|
Completely rewrite HTTP to HTTPS redirect functionality
|
2024-03-03 00:01:17 +01:00 |
|
|
|
067d177321
|
Optimized some regular expressions
|
2024-03-02 22:57:27 +01:00 |
|
|
|
3a966d342a
|
Added option to allow URLs with double slashes
|
2024-03-02 22:54:03 +01:00 |
|
|
|
47803c217b
|
Fix URL rewriter always remove double slashes
|
2024-03-02 22:45:27 +01:00 |
|
|
|
cbbe4c9bc5
|
Fix errors with web root postfix adding functionality
|
2024-03-02 22:41:26 +01:00 |
|
|
|
0f0c1b22ab
|
Prepare web root postfix adding functionality for double slash URL support
|
2024-03-02 22:21:49 +01:00 |
|
|
|
d633707ea5
|
Prevent redirect loops with fallback replacement
|
2024-03-02 22:11:50 +01:00 |
|
|
|
2f232614a2
|
Fix URL rewriting on URLs with double slashes
|
2024-03-02 22:02:24 +01:00 |
|
|
|
28d633884e
|
Prepare for double slash URL support
|
2024-03-02 21:54:07 +01:00 |
|
|
|
bd5ab63954
|
Change lookahead token order in two URL sanitation regular expressions
|
2024-02-28 21:45:47 +01:00 |
|
|
|
ae630a1625
|
URL sanitizer function now uses less regular expression replacements.
|
2024-02-28 21:43:43 +01:00 |
|
|
|
b829414f4c
|
Fixed bug with URLs beginning with multiple slashes being rewritten incorrectly.
|
2024-02-11 21:26:26 +01:00 |
|
|
|
2589eff15f
|
Added new SVR.JS mod and server-side JavaScript variable: authUser.
|
2024-02-07 00:35:00 +01:00 |
|
|
|
9f15a08378
|
Add some code comments
|
2024-02-02 19:49:30 +01:00 |
|
|
|
d85dedea65
|
Clean up the code.
|
2024-02-02 19:32:40 +01:00 |
|
|
|
88e923ffbc
|
Fixed SVR.JS crashes with X-SVR-JS-From-Main-Thread header and unspecified client request IPs
|
2024-02-02 19:23:45 +01:00 |
|
|
|
4d69f6f1a7
|
Add IP-based virtual hosts alongside hostname-based virtual hosts
|
2024-02-02 19:08:49 +01:00 |
|
|
|
ea228114e1
|
Head and foot inclusion is now returning 500 error in case of server error instead of server crash.
|
2024-01-24 19:48:50 +00:00 |
|
|
|
e172c2c005
|
Fix web root postfix prefix support
|
2024-01-24 19:06:00 +00:00 |
|
|
|
e29d1aa3aa
|
Fix syntax error from previous commit.
|
2024-01-24 18:53:29 +00:00 |
|
|
|
5fdbc898d0
|
Add support for web root postfix prefixes.
|
2024-01-24 18:52:05 +00:00 |
|
|
|
6abe280ee8
|
Add support for web root postfixes (for every host)
|
2024-01-23 07:00:23 +01:00 |
|
|
|
6a9afcbc26
|
Add support for useClientCertificate, rejectUnauthorizedClientCertificates, cipherSuite, ecdhCurve, tlsMinVersion, tlsMaxVersion, signatureAlgorithms and http2Settings config.json properties.
|
2024-01-22 23:21:01 +01:00 |
|
|
|
1a2019664a
|
Fixed error handling for invalid URL rewrite regexes. Also fixed bug with HTTP proxy not working.
|
2024-01-18 01:12:09 +01:00 |
|
|
|
60a84d879d
|
Clean up the code (remove trailing spaces)
|
2024-01-14 19:01:49 +01:00 |
|
|
|
db6c4faeaf
|
Mitigate log file injection vulnerability at mod file names.
|
2024-01-14 19:00:27 +01:00 |
|
|
|
e1e9338806
|
SVR.JS no longer crashes, when access to a log file is denied.
|
2024-01-14 09:00:08 +01:00 |
|
