deprecated 'x-gzip'. Acording to RFC2616 clients should handle "x-gzip"
but it seems that at least some Android devices does not.
In general the webserver instead of the CGI should probably do
compression, but this is an easy fix.
PR: www/152202
Reported by: Tom Judge <tom@tomjudge.com>
the relevant parts onto CVSweb 3.0.6 stock files, so it is not entirely
impossible that some local changes were lost, though I don't think/hope
so.
The use of cgi-style.pl was merged by danger@. He also, together with
Dan Langille, got CVSweb 3 tested against FreshPorts prior to commit, so
this update should not blow up FreshPorts. Thanks to both for the help.
Note that this now means that the FreeBSD CGI scripts more or less
require perl 5.8 (or at least something newer than 5.0), to run without
local modifications - but people really shouldn't be running perl 5.0
these days anyway... (no comments on the fact that www.FreeBSD.org did
this until ~2 hours ago... ).
which has more strict taint checks.
This is a temporary stopgap while upgrading to perl 5.8 and migrating
to cvsweb 3 to get around the catch-22 that cvsweb 3 requires perl
5.8, and perl can't be upgraded to 5.8 if it breaks cvsweb.
2002-05-22 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: Read configuration files with `do' instead of
`require' to unbreak mod_perl support.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
* cvsweb.cgi: Cosmetic fixes. Use and/or rather than &&/|| to
connect sentences.
* cvsweb.cgi: Exit with -1 if exec() fails.
* cvsweb.cgi: Do not print a redundant `Diff' for rev.1.1.
[Submitted by: Ville Skytt,Ad(B <ville.skytta@iki.fi>]
* cvsweb.cgi: Prevent cross-site scripting.
[Submitted by: Motoyuki Konno <motoyuki@bsdclub.org> (modified)]
* cvsweb.cgi: Skip a possible `locked by' clause and extract a
revision number out of a log entry properly.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
* cvsweb.cgi: Apply some HTML cleanups and use CSS instead of
ancient HTML 3/4 tags and attributes.
[Submitted by: Ville Skytt,Ad(B <ville.skytta@iki.fi>]
* cvsweb.cgi: Pass `use' features to import to make it more memory
efficient.
[Submitted by: Ville Skytt,Ad(B <ville.skytta@iki.fi>]
* cvsweb.cgi: Add new configuration variables: $allow_log_extra,
$allow_dir_extra, and $allow_source_extra.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
* cvsweb.cgi: Release as FreeBSD-cvsweb 2.0.2.
* cvsweb.cgi: Previous fixes against cross-site scripting
vulnerabilities were insufficient and buggy (error messages were
messed up). Revamp fatal() to HTML-quote automatically and fix
error message output.
* cvsweb.cgi: Release as FreeBSD-cvsweb 2.0.3.
2002-05-11 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: There are no spaces at EOL in modern rlog output.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
2002-05-08 Motoyuki Konno <motoyuki@FreeBSD.org>
* cvsweb.cgi: Fix a cross-site scripting vulnerablity.
2002-05-07 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.conf-netbsd, cvsweb.conf-openbsd: NetBSD and OpenBSD
don't use $CVSHeader$ but $Id$.
[Submitted by: motoyuki@FreeBSD.org]
* cvsweb.cgi: Work around a bug of cvs -p; expand symlinks in a
cvsroot.
[Submitted by: motoyuki@FreeBSD.org]
* cvsweb.cgi: Fix parsing in 'tags' state.
[Submitted by: "Khachaturov, Vassilii" <vassilii@tarunz.org>]
2002-04-11 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi, cvsweb.conf: Perform an HTML cleanup.
[Submitted by: Ville Skytt,Ad(B <ville.skytta@iki.fi>]
* cvsweb.cgi: Call this version FreeBSD-cvsweb 2.0.1.
2002-02-06 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: Use TMPDIR instead of the hardcoded /tmp.
* cvsweb.cgi: Never pass 'MAIN' to cvs(1). 'HEAD' is the valid
tag.
* cvsweb.conf-freebsd: Allow downloading a tarball of a project
directory as well as a port directory.
* cvsweb.cgi, cvsweb.conf: Introduce optional output filter.
[Requested by: Shigeyuki Fukushima <shige@FreeBSD.org>]
* cvsweb.cgi: Fix a bug where it produces wrong download links when
cvsweb.cgi is placed right under the document root.
[Reported by: Arnaud on EFnet]
2001-08-01 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: perltidy -i=8 -t -pt=2 -bt=2 -sbt=2 -ci=4 -noll -sfs
-nasc -ce
* cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd, cvsweb.conf-ruby: perltidy -i=8 -t -pt=2 -bt=2
-sbt=2 -ci=4 -noll -sfs -nasc -ce
* cvsweb.cgi, cvsweb.conf: MFZ 1.111, but introduce @ForbiddenFiles
instead of @DissallowRead to forbid user to cvs
checkout/diff/annotate specified files.
* cvsweb.cgi: MFZ 1.112: A couple of trivial fixes.
2001-07-26 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: Chdir to TMPDIR so it works even when the cgi-bin
directory is unreadable.
[Submitted by: Dmitry Morozovsky <marck@rinet.ru>]
* cvsweb.cgi: Let the module/path box appear and work properly
when there is only one repository.
[Submitted by: Dmitry Morozovsky <marck@rinet.ru>]
2001-07-06 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi, cvsweb.conf: Support "zip" as an additional
archiver.
* cvsweb.cgi: MFZ 1.110. But the bug had already been fixed in
knu-cvsweb.
2001-06-22 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: Get rid of a potential "uninitialized variable
usage" warning.
[Submitted by: Bill Fenner <fenner@FreeBSD.org>]
2001-06-08 Akinori MUSHA <knu@iDaemons.org>
* cvsweb.cgi: MFZ 1.109. Preset the global variable the stores
the per file cvs info to avoid accumulating cruft under modperl.
2001-01-12 08:42 knu
* cvsweb.cgi, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd: Clean up URI parser.
Workaround thttpd's buggy SCRIPT_NAME / PATH_INFO parser.
Requested by: Makoto MATSUSHITA <matusita@jp.FreeBSD.org>
Allow downloading a single port/pkgsrc in tarball by default.
2001-01-12 03:17 knu
* cvsweb.cgi, cvsweb.conf: D'oh, forgot to chomp the result of
`uname`.
Submitted by: Christian Weisgerber <naddy@mips.inka.de>
2001-01-11 11:00 knu
* cvsweb.cgi, cvsweb.conf: Oops.
2001-01-11 10:52 knu
* cvsweb.cgi, cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd: Run "tar cf - ... | gzip -c" rather than "tar
zcf - ..." to avoid tar(1)'s automatic padding of nulls to align
with the block size, which is just garbage for a receiver.
Noted by: Katsuyuki Komatsu <komatsu@sarion.co.jp>
Have $uname variable to hold the OS implementation name.
Move %CMD's initialization part to the beginning of cvsweb.conf so
it can use $uname and configure properly for the OS.
Wrap FreeBSD or OpenBSD specific features in conditional blocks
using $uname.
Fix some open() calls in good manners.
2001-01-05 09:00 knu
* cvsweb.cgi: Delete $ENV{PATH} before everything. (against -T
paranoia) It's nothing to worry since cvsweb.cgi always invokes
executables by full paths, though.
Correct the error messages regarding $command_path.
2001-01-03 17:57 knu
* cvsweb.cgi, cvsweb.conf: Don't rely on perl's $ENV{PATH} search.
Search commands for itself and specify them by full paths.
2001-01-03 11:55 knu
* README.knu, cvsweb.cgi: Don't forget to add $query to the URL
when redirecting. Now module alias redirection and Attic
redirection work with all sticky variables preserved. (Previously
they didn't work against a non-default cvsroot)
Put a text field on each directory view that allows user to jump
directly to an arbitrary module, which can be specified either by a
full module/file path or by a module alias.
2001-01-03 08:34 knu
* README.knu, cvsweb.cgi, cvsweb.conf: List CVS repository entries
in the specified order, not alphabetical.
Now /usr/local/etc/cvsweb/ is the default directory for
configuration files.
2001-01-02 21:23 knu
* cvsweb.cgi, cvsweb.conf: Get cvsweb.cgi to run under perl -T.
Change perl command line:
Change perl5 to perl and just declare `require 5.000'.
Remove -s option that was intended for debug use.
Add -T option to perform security checks.
Change search paths for cvsweb.conf:
Don't adopt the value of $ENV{CVSWEB_CONFIG} that was intended
for
debug use.
Search the same directory that cvsweb.cgi is in instead of the
current directory.
Invoking `last' in `do { ... } while (0);' is wrong. Change the
loop to `while (1) { ... last; }'.
Don't do chdir. Instead, use tar(1)'s -C option and cvs(1)
export's -d option.
Explicitly define $ENV{PATH}.
Turn $allow_compress off by default so user can debug cvsweb.cgi
easily. (Still enabled on freefall)
2001-01-02 08:15 knu
* cvsweb.cgi, cvsweb.conf, cvsweb.conf-freebsd, cvsweb.conf-netbsd,
cvsweb.conf-openbsd, cvsweb.conf-ruby: Add $prkeyword variable to
allow user to use (e.g.) `Bug' instead of `PR' as the bug report
identifier.
Add cvsweb.conf-{freebsd,openbsd,netbsd,ruby} files, and move
rather FreeBSD specific configuration values to
cvsweb.conf-freebsd.
Add a %funcline_regexp entry for Ruby. (*.rb)
2001-01-02 06:24 knu
* cvsweb.conf: Add `pending' to the list of PR categories.
2001-01-02 05:57 knu
* cvsweb.cgi: Reduce 'Use of uninitialized value' warnings.
Noticed by: Wolfram Schneider <wosch@schneider.org>
2000-12-30 08:56 knu
* cvsweb.cgi: Oops, I forgot "cvs export" always need a -r/-D.
Specify -rHEAD when no tag/branch is defaulted.
2000-12-30 08:35 knu
* cvsweb.cgi, cvsweb.conf: Add $preformat_in_markup variable and
turn it off by default. This option should be turned off when you
have files in the repository that are in a multibyte encoding which
uses HTML special characters ([<>&"]) as part of a multi-byte
character. (such as iso-2022-jp, ShiftJIS, etc.) Otherwise those
files will get screwed up in markup.
Fix for those systems which tar(1)'s are not GNU tar(1).
- Add @@tar_options variable and make the --ignore-failed-read flag
optional.
- Use cvs export instead of cvs checkout, so the --exclude 'CVS'
flag isn't needed.
Noticed by: Christian Weisgerber <naddy@mips.inka.de>
Fix for those systems which cvs(1)'s don't support -R option.
(Actually, only FreeBSD's and OpenBSD's cvs(1) support it)
- Add @@cvs_options and make the -R flag optional.
2000-12-29 22:29 knu
* cvsweb.cgi: Add charset to all text/* output, including diffs.
Submitted by: Alexey Zelkin <phantom@cris.net>
2000-12-29 18:12 knu
* cvsweb.cgi: The use of `do "file"' is obsolete. Use require
instead.
2000-12-29 17:47 knu
* cvsweb.cgi: Add the prototype declaration for hrefquote().
2000-12-29 18:12 knu
* cvsweb.cgi: The use of `do "file"' is obsolete. Use require
instead.
2000-12-29 17:47 knu
* cvsweb.cgi: Add the prototype declaration for hrefquote().
2000-12-29 03:17 knu
* README.knu: Mention automatic tarball generation feature.
2000-12-29 03:16 knu
* TODO.knu: Directory sorting was fixed at the same time that "show
only tags" feature was fixed.
2000-12-29 03:07 knu
* cvsweb.cgi: Specify --ignore-failed-read on invoking tar(1).
2000-12-29 02:49 knu
* cvsweb.cgi, cvsweb.conf: Add "automatic tarball generation"
feature. You can check out a whole directory in gzipped tarball.
Obtained from: Debian package: cvsweb_1.93-1
Allow space characters in file names. (not tested yet)
Note that automatic tarball generation feature is disabled for the present.
2000-12-18 13:25 knu
* TODO.knu, cvsweb.cgi: Revert MFZ: 1.103 -> 1.104 which introduced
a bogus bug. As noone seems to need to use 0.X revisions, I'd just
drop it. This should fix the "show only tags" feature.
2000-12-18 12:47 knu
* cvsweb.cgi: Silence the warnings.
2000-12-18 11:48 knu
* cvsweb.cgi: Add meta tags to prevent WWW robots from crawling
over the cvsweb.
Submitted by: Wolfram Schneider <wolfram@schneider.org>
2000-12-08 00:11 knu
* cvsweb.cgi: Silence `Use of uninitialized value' warnings.
(again)
2000-12-07 03:20 knu
* TODO.knu: Mention "show only tags" feature breakage.
2000-12-07 03:19 knu
* cvsweb.cgi: Emit a rather better error message when a user
requests to check out a deleted file.
Pointed out by: Chris Faulhaber <jedgar@fxp.org>
Cut an out-of-date error message. (adding -R and -l options to the
cvs command line should have obsoleted it)
Optimize, clean up.
2000-11-23 04:26 knu
* cvsweb.cgi, cvsweb.conf: Add a new variable $charset to specify
the charset for HTML output.
Submitted by: SADA Kenji <sada@bsdclub.org>
2000-11-05 00:32 knu
* cvsweb.cgi: Silence `Use of uninitialized value' warnings.
2000-11-03 02:36 knu
* README.knu: Mention cat.1 is hyperlinked as well as cat(1).
2000-11-03 02:34 knu
* cvsweb.cgi: MFZ: 1.104:
2000-11-02 07:05 hnordstrom
* cvsweb.cgi: Allow for 0.X versions. CVS accepts such
version numbers in import -b even if not strictly legal...
2000-11-03 02:33 knu
* cvsweb.conf: Set the default diff type to unidiff for all
browsers, not only text-based ones.
2000-10-21 00:46 knu
* cvsweb.cgi: Always give options to click on a non-colored diff
_and_ a colored diff.
Requested by: SO many people :>
2000-10-20 22:59 knu
* TODO.knu: Hyperlinking was properly fixed.
2000-10-20 21:28 knu
* TODO.knu, cvsweb.cgi: Fix htmllify so that <A href="...">...</A>
won't nest. :)
Do not show additional "(colored)" diff links when long colored
diff is the default.
Reduce the use of `.' operator that is known to be expensive. Fix
indent, clean up.
2000-10-11 06:14 knu
* cvsweb.cgi: Introduce a new function: htmlquote().
Clean up hyperlink tags.
- Use &link() instead of <a href="...">...</a>.
- Do urlencode() or htmlquote() as appropriate.
2000-10-11 03:48 knu
* cvsweb.cgi:
- Recognize "links" as another text mode browser.
- Fix the revision links in the annotation view of a file.
Submitted by: Christian Weisgerber <naddy@mips.inka.de>
2000-10-07 16:44 knu
* cvsweb.cgi: Fix &link() not to put a redundant trailing LF.
Improve manpage linking to support "foo.1" as well as "foo(1)".
2000-10-07 16:35 knu
* cvsweb.cgi: Fix screwups in the last commit.
Parse rlog's output explicitly. Recognize 77 ='s as a file
separator, and 28 -'s as revision separator.
Submitted by: Makoto MATSUSHITA <matusita@jp.FreeBSD.org>
2000-10-03 04:07 knu
* cvsweb.cgi: Cleanup $barequery generation. Undefine "my"
variables when they are done.
2000-10-01 05:10 knu
* cvsweb.cgi: Fix annotation bugs.
- Do not pass gzip'ed directives to cvs. (it never worked, sigh)
- Fix mis-spacing. Now it should look pretty well.
2000-10-01 03:48 knu
* INSTALL, cvsweb.cgi: Specify -R (Read-only mode) and -l (Do not
log in history) flags when doing a cvs annotation so that one does
not need to turn on the write permission on CVSROOT/history for the
user which httpd runs cvsweb.cgi as. (typically "nobody")
2000-10-01 03:27 knu
* cvsweb.cgi: Fix the comment to make how to set $config clear.
Inspired by: "Dan Langille" <dan@langille.org>
2000-09-29 03:06 knu
* cvsweb.cgi: Trap errors in the configuration files on loading and
show error messages. (Previously it failed silently)
Submitted by: Sean Scarff <sean@pavilion.net>
mistakenly lost when I upgraded cvsweb.
Noticed by: Joao Pedras <jpedras@webvolution.net>
Merge from knu-cvsweb 1.103.1.26.
2000-09-22 20:13 knu
* cvsweb.cgi, cvsweb.conf: Remove $backcolor and introduce
$body_tag_for_src to allow to set the foreground color.
Noticed by: dcs@FreeBSD.org
2000-09-22 00:30 knu
* cvsweb.cgi: MFZ: 1.103.
2000-09-20 05:07 knu
* cvsweb.cgi: Follow tab-width/tabstop/ts directives when expanding
tabs into spaces. Currently, only first 10 lines are scanned for
the directives.
2000-09-20 04:57 knu
* cvsweb.cgi: MFZ: 1.101.
- Fix a few bugs under mod_perl.
- Use the Compress::Zlib module if available.
- Embed PDF files inside the cvs markup view.
2000-09-20 03:35 knu
* cvsweb.cgi: s/ts/tabstop/ that I forgot to substitute in the last
update.
2000-09-12 02:11 knu
* cvsweb.cgi: Allow one to set the default diff type.
Inspired by: Makoto MATSUSHITA <matusita@jp.FreeBSD.org>
2000-09-10 20:54 knu
* cvsweb.cgi: Clean up spacedHtmlText().
2000-09-04 03:25 knu
* README.knu, cvsweb.cgi, cvsweb.conf: Introduce manpage
hyperlinking.
2000-09-04 02:33 knu
* cvsweb.cgi: Get all mail URLs and addresses as hyperlinks, not
just the first one. (s/// --> s///g)
2000-08-25 18:01 knu
* cvsweb.cgi: Get side-by-side diff working when $showfunc is true,
noting that `-p' option of diff(1) can only be used with context
and unified diffs.
Submitted by: Roger Hardiman <roger@cs.strath.ac.uk>
Allow to specify CVS tags or branch names (including `.' and
`HEAD') on cvs checkout.
e.g. http://foo/cvsweb.cgi/bar/dood.c?rev=.
http://foo/cvsweb.cgi/bar/dood.c?rev=RELENG_4http://foo/cvsweb.cgi/bar/dood.c?rev=RELENG_4_1_0_RELEASE
Not for diff currently, as rcsdiff does not grok CVS tags.
Inspired by: Folks at the FreeBSD cvs-all list.
Specify `-R' (turn on read-only repository mode) and `-l' (do not
log in the command history) on cvs checkout, so that one does not
need a write permission with the repository.
2000-08-25 00:53 knu
* cvsweb.cgi: MFZ 1.94. (Fix a typo in JavaScript code)
I had carelessly used Perl5 specific syntax everywhere in my previous
changes as I wasn't aware that there were those mirror sites that
still use perl4.
Pointed out by: wosch
