1312 Commits
Author SHA1 Message Date
Kristaps Dz 575e9267f7 Merge pull request #97 from bapt/master
Add the "role" attribute from ARIA
2022-04-02 11:17:13 -08:00
Kristaps Dz 9ed56c1994 Merge pull request #98 from emilengler/2022-03-typo-man
Fix spelling mistake in kcgi.3.
2022-04-02 11:16:35 -08:00
Emil Engler 9121aa1b1b Fix spelling mistake in kcgi.3. 2022-03-01 17:57:12 +01:00
Baptiste Daroussin fe203d650f Add the "role" attribute from ARIA
https://www.w3.org/TR/wai-aria/#host_general_role
2022-01-11 10:18:08 +01:00
Kristaps Dz eb8ed8af8c No longer using a CVS backend repository. 2021-09-24 09:24:49 +02:00
Kristaps Dz 2601ac1ef7 Version notes. 2021-09-23 22:12:14 +02:00
Kristaps Dz 760f3c3212 Add more files to ignore list. 2021-09-23 15:50:32 +02:00
Kristaps Dz c37614ff8a Merge pull request #95 from szanni/seccomp-filter-fix
Add newfstatat() syscall to seccomp filter allow list.
2021-09-23 15:40:08 +02:00
Kristaps Dz 7fef903650 Merge pull request #94 from cornett/html-write
Fix khtml_write.3 example
2021-09-23 15:39:28 +02:00
Kristaps Dz 8b35a20d1a Use proper warning function. 2021-09-23 15:38:01 +02:00
Kristaps Dz 18e47345c0 Merge branch 'emilengler-2021-07_snprintf_check' into master 2021-09-23 15:20:56 +02:00
Kristaps Dz c978a4ed4b Merge branch '2021-07_snprintf_check' of https://github.com/emilengler/kcgi into emilengler-2021-07_snprintf_check 2021-09-23 15:20:34 +02:00
Kristaps Dz 8d5b3e263a Abandoned seccomp by default.
seccomp is causing too many problems, and I don't have the resources to
test all the hardware and software combinations that are required.

I'll continue to update the machinery when patches come in, but until
Linux has a security mechanism that doesn't require a corporate
infrastructure to operate, sandboxing for this operating system is
disabled by default.

If you're running kcgi in a security-sensitive environment, seccomp can
be enabled in the Makefile (instructions are therein).  If you're
packaging kcgi for seccomp systems, please don't enable it unless you've
tested for the target platform!

I strongly urge security-sensitive applications to move to OpenBSD or
FreeBSD, whose security mechanisms are much more friendly to
development.
2021-09-23 14:45:37 +02:00
Kristaps Dz 29f1fd6cc6 Sync with newest oconfigure. 2021-09-23 14:35:14 +02:00
kristapsdz 8bc26b4a09 Keep up to date with new developments. 2021-09-23 12:23:21 +00:00
Angelo Haller 9be0864fef Add newfstatat() syscall to seccomp filter allow list.
Seemingly newer versions of glibc call newfstatat(), wrapping
fstatat() and breaking kutil_openlog().

According to `man 2 newfstatat`[0] the employed system call might be
called fstatat64() on some systems, meaning this patch might not fix
all Linux systems.

[0] https://man.archlinux.org/man/newfstatat.2.en
2021-08-24 11:02:23 -05:00
Ben Cornett 290d9f2c0a Fix khtml_write.3 example 2021-08-06 16:30:02 +00:00
Emil Engler d108cbc4e6 Check for snprintf(3) failure.
The function must always return a 3.
If we get a different number or even a negative one indicating an
unlikely but possible error in the printf-engine we will probably
get into trouble.
2021-07-26 17:12:03 +02:00
kristapsdz 12c1d9d7db Add tests for bearer validation and do some style(9). 2021-05-12 10:07:32 +00:00
kristapsdz cb1d14d0d7 CURLOPT_BEARER isn't always defined. 2021-05-12 10:01:05 +00:00
kristapsdz 790d4d9711 It's common to use the "bearer" authentication in the same way as the basic.
Allow this to happen and document it.
2021-05-12 09:58:46 +00:00
kristapsdz c8475c9099 No need to hotfix a version for this. 2021-05-08 14:50:33 +00:00
kristapsdz 40337060b3 Forgot to set date. 2021-05-08 14:49:01 +00:00
kristapsdz 476787dabb Bump version. 2021-05-08 14:41:21 +00:00
kristapsdz d666285483 Add example and note behaviour following khttp_fcgi_init(). 2021-05-08 14:30:41 +00:00
kristapsdz 9a51677e8a Typo in testing for non-NULL.
Fixes https://github.com/kristapsdz/kcgi/issues/85
2021-05-08 14:30:20 +00:00
kristapsdz 1f494347bf mandoc nits. 2021-05-08 13:48:10 +00:00
kristapsdz 972fb69825 Add KAUTH_BEARER documentation. 2021-05-08 13:36:15 +00:00
kristapsdz bd4fdbce9b Add tests for bearer authorisation. 2021-05-08 13:20:25 +00:00
kristapsdz 1506748adf Add bearer authorisation. 2021-05-08 13:04:11 +00:00
kristapsdz 4e867a60d7 Tweak. 2021-05-08 09:54:59 +00:00
kristapsdz e58eab54b8 Sync with license text in sources.
Fixes https://github.com/kristapsdz/kcgi/pull/90
2021-05-08 09:54:01 +00:00
kristapsdz ad18d54ef1 Version bump. 2021-03-02 22:37:47 +00:00
kristapsdz 587c681353 Bring up to speed with oconfigure. 2021-03-02 21:15:56 +00:00
kristapsdz 9ccaea4f88 Add some HTML5.2 elements. 2021-03-02 21:15:26 +00:00
kristapsdz a2d7dbc5e7 Add some more HTML5.2 attributes. 2021-03-02 21:07:08 +00:00
kristapsdz d66587dda6 Specifically note HTML5.2 conformance. 2021-03-02 20:14:42 +00:00
kristapsdz aaf82d965e Add support for the <main> flow tag. This is an HTML5 flow element and has
been since the initial HTML5 standard.

Fixes https://github.com/kristapsdz/kcgi/pull/89
2021-03-02 20:13:40 +00:00
kristapsdz c96aeccbd7 Bump version and add version notes. 2021-01-20 22:35:40 +00:00
kristapsdz 2667da7625 Bring up to date with latest oconfigure. 2021-01-20 22:29:03 +00:00
kristapsdz 496843721b Typo. Thank you to Conrad Pankoff for the report!
https://github.com/kristapsdz/kcgi/pull/86
2021-01-20 22:28:19 +00:00
kristapsdz 45babf729d Use correct CFLAGS for regression to avoid spamming about deprecated. 2021-01-20 22:23:45 +00:00
kristapsdz d239abaa20 Cast to silence compiler warning. 2021-01-20 22:23:20 +00:00
kristapsdz ee12f2da1f Make sure we're not doing pointer arithmetic with an int64_t size. Thanks
to A. Tammy for providing a system for this problem to be diagnosed and fixed!

Fixes https://github.com/kristapsdz/kcgi/issues/88
2021-01-20 22:16:10 +00:00
kristapsdz cfe14c8cce Split khttp_templatex functions out of khttp_template.3.
Provide working examples for both.
2020-10-17 12:02:59 +00:00
kristapsdz 15a2db7654 Make sure that multiple similar keys only select the first. 2020-10-17 10:36:23 +00:00
kristapsdz 3aa6e4f74a Make sure abutting escape works. 2020-10-17 10:32:47 +00:00
kristapsdz 409cb9ab69 Check for empty key sequences. 2020-10-17 10:30:06 +00:00
kristapsdz 6d2166211c Actually give kcgiregress(3) a proper example and bring its language and
content in line with the other manpages.
2020-08-14 10:49:48 +00:00
kristapsdz 53d2f56a7f Version and noting new architectures. 2020-07-24 13:00:14 +00:00