kutulutsidwa kwa seva yopepuka ya http . Mtundu watsopanowu uli ndi zosintha 149, makamaka kuphatikizidwa kwa kusintha kwa URL mwachisawawa, kukonzanso kwa mod_webdav, ndi ntchito yokhathamiritsa magwiridwe antchito.
Kuyambira lighttpd 1.4.54 Makhalidwe a seva okhudzana ndi kusintha kwa URL mukamakonza zopempha za HTTP. Zosankha zowunikira kwambiri zomwe zili pamutu wa Host zimayatsidwa, kukhazikika kwa maulalo otumizidwa pamitu ndikutsekereza maulalo okhala ndi zilembo zowongolera zomwe sizinapulumuke zimayatsidwanso. Njira yokhazikika imaphatikizapo kusintha kwa '\' kupita ku '/', '%2F' kukhala '/', '%20' kukhala '+', kuthetsa ndi kuchotsa mbali za njira zamafayilo ndi '.' ndi '..', kumasulira zilembo zothawa '-', '.', '_' ndi '~'.
Ngati mungafune, machitidwe opangira ulalo amatha kusinthidwa pazokonda pogwiritsa ntchito zosankha "header-strict", "host-strict", "host-normalize", "url-normalize", "url-normalize-unreserved", "url -normalize-chofunikira" ",
"url-ctrls-reject", "url-path-2f-decode", "url-path-dotseg-remove" ndi "url-query-20-plus", zomwe tsopano zayikidwa "kuyambitsa".
Zosintha zina zikuphatikiza kukonzanso kwathunthu kwa mod_webdav module, zomwe zidapangitsa kuti zitheke kuyanjana kwathunthu ndi mafotokozedwe, kukonza magwiridwe antchito ndi kudalirika. Zina mwazosintha zomwe zimagwirizana ndi mod_webdav ndikuletsa zopempha zosakwanira za PUT. Mod_auth imawonjezera chithandizo cha SHA-256 algorithm ya magawo ovomerezeka a hashing (HTTP Auth Digest).
Gawo latsopano, mod_maxminddb, lakonzedwa kuti lilowe m'malo mwa mod_geoip (mod_geoip tsopano yachotsedwa).
Source: opennet.ru