The last proposed request handling backport to bring 2.2.x up to 2.4.x standards

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.2.x@1757407 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/STATUS b/STATUS
index 4647d78e3447ae5aa770e477047a069897336f72..cbee251c9fc5bedd810db0883758dda9016bcb55 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -197,12 +197,30 @@ PATCHES PROPOSED TO BACKPORT FROM TRUNK:
      Support custom ErrorDocuments for HTTP 501 and 414 status codes.
      PR: 48357, 57167
      Submitted by: trawick,  [Edward Lu <Chaosed0 gmail.com>]
+     Trunk version of patch
          http://svn.apache.org/r1392347
          http://svn.apache.org/r1635762
      Backport:
          https://raw.githubusercontent.com/wrowe/patches/master/backport-2.2.x-r1392347-r1635762.patch 
      +1: wrowe
 
+  *) core: Limit to ten the number of tolerated empty lines between request.
+     Before this commit, the maximum number of empty lines was the same as
+     configured LimitRequestFields, defaulting to 100, which was way too much.
+     We now use a fixed/hard limit of 10 (DEFAULT_LIMIT_BLANK_LINES).
+     Exit early on ap_parse_uri failure, and ensure that proto_num and protocol
+     is set; this can happen with invalid CONNECT requests.
+     Submitted by: ylavic, rpluem
+     Note: http_request.c changes from this patch and follow-ups 
+           r1710105, r1711902 are not applicable to the 2.2.x pipeline.
+           CHANGES is unnecessary, the regression was never released in 2.2.x.
+     Trunk version of patch
+         http://svn.apache.org/r1710095
+         http://svn.apache.org/r1727544
+     Backport:
+         https://raw.githubusercontent.com/wrowe/patches/master/backport-2.2.x-r1710095-1727544.patch 
+     +1: wrowe
+
 
 PATCHES/ISSUES THAT ARE STALLED