You are viewing a plain text version of this content. The canonical link for it is here.

Posted to apreq-cvs@httpd.apache.org by jo...@apache.org on 2004/08/03 22:02:24 UTC

cvs commit: httpd-apreq-2 CHANGES STATUS

joes        2004/08/03 13:02:24

  Modified:    .        CHANGES STATUS
  Log:
  Note status of TAINT checks
  
  Revision  Changes    Path
  1.62      +4 -0      httpd-apreq-2/CHANGES
  
  Index: CHANGES
  ===================================================================
  RCS file: /home/cvs/httpd-apreq-2/CHANGES,v
  retrieving revision 1.61
  retrieving revision 1.62
  diff -u -r1.61 -r1.62
  --- CHANGES	31 Jul 2004 23:56:39 -0000	1.61
  +++ CHANGES	3 Aug 2004 20:02:24 -0000	1.62
  @@ -4,6 +4,10 @@
   
   @section v2_04_dev Changes with libapreq2-2.04-dev
   
  +
  +- Perl API [joes]
  +  Add TAINT checks, marking all parsed data as tainted.
  +
   - C API [joes]
     Add body_status attribute to apreq_request_t, to allow the both
     environment and the parser to report any errors encountered.
  
  
  
  1.80      +5 -1      httpd-apreq-2/STATUS
  
  Index: STATUS
  ===================================================================
  RCS file: /home/cvs/httpd-apreq-2/STATUS,v
  retrieving revision 1.79
  retrieving revision 1.80
  diff -u -r1.79 -r1.80
  --- STATUS	29 Jul 2004 17:53:40 -0000	1.79
  +++ STATUS	3 Aug 2004 20:02:24 -0000	1.80
  @@ -83,6 +83,10 @@
       - Rework glue/perl build system to use apreq2-config instead of
         relying on paths like "../../src".
   
  +    - Taint checks need to be extended to APR objects, like
  +      $upload->bb and $upload->info.  We may need be able to
  +      do that with additional typemaps.
  +
   
   OPEN ISSUES: