-- SECURITY: patch from Jeremey James <firstname.lastname@example.org> to not crash
on zero byte chunked upload when buffered uploads are enabled.
-- on successful write, update Perlbal::Socket's alive_time, so slowly
reproxied writes don't timeout the connection and kill it. Patch
from Jonty <email@example.com>. r765
-- Perl 5.10 support. Patch from Andy Armstrong <firstname.lastname@example.org>.
Disclaimer: at least the tests all pass now, but no real-world use yet.
Should be fine, though. Please report your success to the mailing list
-- Add Include plugin by Eamon Daly <email@example.com>; plugin
allows you to use "INCLUDE = /etc/conf.d/*" or "INCLUDE = /foo.conf"
to bring in more config; can be nested.
-- SECURITY: Previously a single upward directory traversal was possible
when concat get was enabled. This behavior has been fixed in code to
match with standard file serving.
-- Fix 'No such pseudo-hash field "high_priority"' issue in Stats plugin
(Eamon Daly and Jonty Wareing)
-- Support for "anonymous services", for API callers that really don't
care what their service is called but just want to get hold of a
Service object. These aren't really anonymous, but they have suitably
ugly names that no sane human should ever conflict with them.
-- add some new methods that make it a little nicer to embed Perlbal
in another application that uses Danga::Socket. Some refactoring
was done to avoid duplicate code between the "end-user" way and the
-- Chained selectors. from Jeremy James <firstname.lastname@example.org>.
-- add "cgilike" plugin which offers a simple API very loosely based on
mod_perl for handling responses
-- add HTTPHeaders method set_request_uri so plugins can modify the uri
-- access control test
-- add option to AccessControl plugin to use observed_ip_string instead
-- add observed_ip_string method to perlbal sockets, allowing http
connections to set an observed ip string when an upstream proxy is
-- add blind_proxy option, which disables appending to the end of the
X-Forwarded-For header when connections arrive from a trusted proxy.
-- make socket closing more verbose when Perlbal::DEBUG is set
-- verify_backend_path configuration option
-- don't overwrite $^P, allows use of perl debugger on perlbal.
Although the security impact of the two bugs is only "middle", I guess we should update it soon.
Maintainers, please bump as needed. (and fixing whiteboard since it's ~arch only)
(In reply to comment #1)
> Maintainers, please bump as needed. (and fixing whiteboard since it's ~arch