Saki na lighttpd 1.4.54 http uwar garken tare da daidaita URL

aka buga sakin sabar http mai nauyi Hasken Haske 1.4.54. Sabuwar sigar ta ƙunshi canje-canje 149, musamman haɗar daidaita URL ta tsohuwa, sake aikin mod_webdav, da aikin haɓaka aiki.

Tunda lighttpd 1.4.54 canza Halin uwar garken mai alaƙa da daidaita URL lokacin sarrafa buƙatun HTTP. Zaɓuɓɓuka don tsananin duba ƙima a cikin taken Mai watsa shiri ana kunna su, ana kunna daidaita hanyoyin haɗin da aka aika a cikin masu kai da kuma toshe hanyoyin haɗin gwiwa tare da haruffan sarrafawa waɗanda ba su tsira ba. Tsarin daidaitawa ya haɗa da jujjuya atomatik na '\' zuwa '/', '% 2F' zuwa '/', '%20' zuwa '+', ƙuduri da cire sassan hanyoyin fayil tare da' kundayen adireshi. da '..', da zayyana haruffan da suka tsere '-', '.', '_' da '~'.

Idan ana so, za a iya canza halayen sarrafa URL a cikin saitunan ta amfani da zaɓuɓɓukan "mai kai-tsaye", "host-strict", "host-normalize", "url-normalize", "url-normalize-unreserved", "url". -al'ada-da ake bukata", ",
"url-ctrls-reject", "url-path-2f-decode", "url-path-dotseg-remove" da "url-query-20-plus", waɗanda yanzu an saita su zuwa "enable".

Sauran canje-canje sun haɗa da cikakken sake yin aiki na mod_webdav module, wanda ya sa ya yiwu a cimma cikakkiyar daidaituwa tare da ƙayyadaddun bayanai, inganta aiki da aminci. Daga cikin sauye-sauyen warwarewar jituwa zuwa mod_webdav shine toshe buƙatun PUT da basu cika ba. Mod_auth yana ƙara goyan baya ga SHA-256 algorithm don hashing ingantattun sigogi (HTTP Auth Digest).
An gabatar da sabon tsari, mod_maxminddb, don maye gurbin mod_geoip (mod_geoip yanzu ya ƙare).

source: budenet.ru

Add a comment