fielding 98/10/05 15:34:30
Modified: . STATUS Log: Remove note about HTTP status codes (done) and move the general stuff in the postponed category back up to the general category. Revision Changes Path 1.501 +52 -55 apache-1.3/STATUS Index: STATUS =================================================================== RCS file: /home/cvs/apache-1.3/STATUS,v retrieving revision 1.500 retrieving revision 1.501 diff -u -r1.500 -r1.501 --- STATUS 1998/10/05 10:55:12 1.500 +++ STATUS 1998/10/05 22:34:28 1.501 @@ -261,6 +261,58 @@ * Should we re-enable nagle now that we're non-buffering CGIs? See various messages from Marc in March 98. + * TZ should not be dealt with specially any longer now that we have + "PassEnv". See + <[EMAIL PROTECTED]> + Jim: IMO it's too late in the game for this... I'm + sure this would cause some strange bug reports as + people's cgi-scripts no longer work correctly + ("It worked just fine before I upgraded to 1.3.0") + unless we warn people in big nasty letters to add + PassEnv TZ to their config files "just in case" + and hope they do it :) + + * In ap_bclose() there's no test that (fb->fd != -1) -- so it's + possible that it'll do something completely bogus when it's + used for read-only things. - Dean Gaudet + + * ap_pcfg_openfile doesn't use pfopen() to open the file. Consider + .htaccess parsing, if a timeout occurs the file may not be closed. I + can't imagine that a timeout would be set during this stage... but it'd + probably be good to just clean this up. - Dean Gaudet + + * Okay, so our negotiation strategy needs a bit of refinement. See + <[EMAIL PROTECTED]>. + In general, we need to go through and clean up the negotiation + module to make it compliant with the final HTTP/1.1 draft, and at the + very least we should make it more copacetic to the idea of transferring + gzipped variants of files when both variants exist on the server. + + * Roy's HTTP/1.1 Wishlist items: + 1) Expect + 2) byte range error handling + 3) update the Accept-Encoding parser to allow q-values + + * use of spawnvp in uncompress_child in mod_mime_magic - doesn't + use the new child_info structure, is this still safe? Needs to be + looked at. + + * suexec doesn't understand argv parameters; e.g. + + <!--#exec cmd="./ls -l" --> + + fails even when "ls" is in the same directory because suexec is trying + to stat a file called "ls -l". A patch for this is available at + + http://www.xnet.com/~emarshal/suexec.diff + + and it's not bad except that it doesn't handle programs with spaces in + the filename (think win32, or samba-mounted filesystems). There are + several PR's to this and I don't see for security reasons why we can't + accomodate it, though it does add complexity to suexec.c. + PR #1120 + Brian: +1 + Win32 specific issues: Important @@ -390,61 +442,6 @@ * apparently either "BrowserMatch" or the "nokeepalive" variable cause instability - see PR#1729. - -Delayed until after 1.3.2, unless someone happens to get to it: - - * TZ should not be dealt with specially any longer now that we have - "PassEnv". See - <[EMAIL PROTECTED]> - Jim: IMO it's too late in the game for this... I'm - sure this would cause some strange bug reports as - people's cgi-scripts no longer work correctly - ("It worked just fine before I upgraded to 1.3.0") - unless we warn people in big nasty letters to add - PassEnv TZ to their config files "just in case" - and hope they do it :) - - * In ap_bclose() there's no test that (fb->fd != -1) -- so it's - possible that it'll do something completely bogus when it's - used for read-only things. - Dean Gaudet - - * ap_pcfg_openfile doesn't use pfopen() to open the file. Consider - .htaccess parsing, if a timeout occurs the file may not be closed. I - can't imagine that a timeout would be set during this stage... but it'd - probably be good to just clean this up. - Dean Gaudet - - * Okay, so our negotiation strategy needs a bit of refinement. See - <[EMAIL PROTECTED]>. - In general, we need to go through and clean up the negotiation - module to make it compliant with the final HTTP/1.1 draft, and at the - very least we should make it more copacetic to the idea of transferring - gzipped variants of files when both variants exist on the server. - - * Roy's HTTP/1.1 Wishlist items: - 1) New status codes? - 2) Expect - 3) byte range error handling - 4) update the Accept-Encoding parser to allow q-values - - * use of spawnvp in uncompress_child in mod_mime_magic - doesn't - use the new child_info structure, is this still safe? Needs to be - looked at. - - * suexec doesn't understand argv parameters; e.g. - - <!--#exec cmd="./ls -l" --> - - fails even when "ls" is in the same directory because suexec is trying - to stat a file called "ls -l". A patch for this is available at - - http://www.xnet.com/~emarshal/suexec.diff - - and it's not bad except that it doesn't handle programs with spaces in - the filename (think win32, or samba-mounted filesystems). There are - several PR's to this and I don't see for security reasons why we can't - accomodate it, though it does add complexity to suexec.c. - PR #1120 - Brian: +1 Binaries The goal here is to have two columns of all-Y (where applicable)