[multiple] clang -Wstrict-prototypes for C2x

adjustments to compile warnings-free with recent clang changes that
warn about potential behavior change for non-prototypes, including
generic function p

[multiple] clang -Wstrict-prototypes for C2x

adjustments to compile warnings-free with recent clang changes that
warn about potential behavior change for non-prototypes, including
generic function pointers e.g. int(*)()

x-ref:
https://discourse.llvm.org/t/rfc-enabling-wstrict-prototypes-by-default-in-c/60521
https://www.open-std.org/jtc1/sc22/wg14/www/docs/n2432.pdf
https://www.open-std.org/jtc1/sc22/wg14/www/docs/n2841.htm

show more ...

[multiple] remove deprecated modules

remove deprecated modules:
mod_evasive
mod_secdownload
mod_uploadprogress
mod_usertrack

These scheduled lighttpd behavior changes have been announced ov

[multiple] remove deprecated modules

remove deprecated modules:
mod_evasive
mod_secdownload
mod_uploadprogress
mod_usertrack

These scheduled lighttpd behavior changes have been announced over
the past year:

* Continue gradual deprecation of "mini-application" lighttpd modules
for which mod_magnet lua implementations are better and more flexible.
Please post on lighttpd forums to share feedback if you use these modules.
Forums: https://redmine.lighttpd.net/projects/lighttpd/boards

* Deprecated: mod_evasive has been removed.
mod_evasive can be replaced by mod_magnet and a few lines of lua:
Replacement: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_evasive
https://wiki.lighttpd.net/AbsoLUAtion#Fight-DDoS
https://wiki.lighttpd.net/AbsoLUAtion#Mod_Security

* Deprecated: mod_secdownload has been removed.
mod_secdownload can be replaced by mod_magnet and a few lines of lua:
Replacement: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_secdownload
mod_secdownload historically uses insecure MD5 though SHA1, SHA256 available

* Deprecated: mod_uploadprogress has been removed.
mod_uploadprogress can be replaced by mod_magnet and a few lines of lua:
Replacement: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_uploadprogress

* Deprecated: mod_usertrack has been removed.
mod_usertrack can be replaced by mod_magnet and a few lines of lua:
Replacement: https://wiki.lighttpd.net/ModMagnetExamples#lua-mod_usertrack
mod_usertrack historically uses insecure MD5.

show more ...

[core] fix li_base64_dec() on whitespace

(regression in lighttpd 1.4.60 - lighttpd 1.4.65)

impacted: mod_wolfssl loading certificate private keys

must ignore whitespace in count of encoded chars

[core] buffer_append_bs_escaped_json()

separate func from buffer_append_bs_escaped() so that both
buffer_append_bs_escaped() and buffer_append_bs_escaped_json()
can be slightly more specialized and

[core] buffer_append_bs_escaped_json()

separate func from buffer_append_bs_escaped() so that both
buffer_append_bs_escaped() and buffer_append_bs_escaped_json()
can be slightly more specialized and optimized

show more ...

[tests] test stubs for http_header.c and http_kv.c

[core] "url-invalid-utf8-reject" normalization opt

server.http-parseopts "url-invalid-utf8-reject" url normalization option
default: "url-invalid-utf8-reject" => "enable"

[multiple] remove buffer_init_string()

remove (minor) convenience func; easy to replace

[asan tests] fix memory leaks

[multiple] remove r->physical.etag

(no longer used; was used as temporary buffer)

[tests] t/test_mod_ssi adjust to follow symlinks

t/test_mod_ssi adjust to follow symlinks

/tmp may be a symlink on MacOS

[core] allocate pcre output vector on demand

allocate pcre output vector on demand for saved config captures
(similar to what is done in lighttpd for pcre2 support)

[core] pcre2 support (--with-pcre2)

x-ref:
"lighttpd: depends on obsolete pcre3 library"
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1000063

[core] use stack w/ pcre_exec unless save captures

use stack w/ pcre_exec unless saving captures from config conditions

reduce memory allocations per request where lighttpd.conf does not
contain ur

[core] use stack w/ pcre_exec unless save captures

use stack w/ pcre_exec unless saving captures from config conditions

reduce memory allocations per request where lighttpd.conf does not
contain url.redirect or url.rewrite rules where replacements reference
a match of the enclosing lighttpd.conf condition (e.g. %0, %1, %2 ...)

move cond_cache_t 'patterncount' to cond_match_t 'captures'
While cond_match_t is no longer sized power-2, it is generally expected
to be used much less frequently than before (which was all the time),
since it is now used only with url.redirect or url.rewrite with
references %0, %1, %2, ...

show more ...

[tests] combine tests into test_common.c

combine common components tests into test_common.c

combine into a single executable to reduce compilation/link redundancy

[tests] t/test_mod_evasive.c

[tests] t/test_mod_alias.c

[tests] t/test_mod now runs all t/test_mod_*.c

combine into a single executable to reduce compilation/link redundancy

[mod_ssi] merge mod_ssi_expr.c into mod_ssi.c

isolate this ancient relic

[mod_ssi] remove mod_ssi parser generator file

[tests] reenable test_mod_ssi in cmake

(Instead, workaround added for libtool)
(There must be better ways to do this, but I don't know them right now)

[core] fdevent_impl.c separate from fdevent.c

[tests] t/test_mod_ssi

[multiple] de-dup file and piped loggers (fixes #3101)

de-dup file and piped loggers for error logs and access logs

x-ref:
"RFE: de-dup file and piped loggers"
https://redmine.lighttpd.net/issu

[multiple] de-dup file and piped loggers (fixes #3101)

de-dup file and piped loggers for error logs and access logs

x-ref:
"RFE: de-dup file and piped loggers"
https://redmine.lighttpd.net/issues/3101

show more ...

[multiple] quiet coverity warnings

[tests] t/test_mod_indexfile

also remove some now-redundant tests from request.t
and reduce scripts and directories under tests
(because automake is sloooow and the fewer dirs, the better)