[core] buffer_append_bs_escaped_json()

separate func from buffer_append_bs_escaped() so that both
buffer_append_bs_escaped() and buffer_append_bs_escaped_json()
can be slightly more specialized and

[core] buffer_append_bs_escaped_json()

separate func from buffer_append_bs_escaped() so that both
buffer_append_bs_escaped() and buffer_append_bs_escaped_json()
can be slightly more specialized and optimized

show more ...

[tests] combine tests into test_common.c

combine common components tests into test_common.c

combine into a single executable to reduce compilation/link redundancy

[core] quiet coverity noise

[core] simplify buffer_path_simplify()

[tests] use buffer_eq_slen() for str comparison

(substitute buffer_eq_slen() for buffer_is_equal_string())

[core] buffer_append_path_len()

concatenate paths, placing single '/' between strings

reverts broken commit:b9402283

(thx avij)

[core] reject decoded url-path without leading '/'

buffer_simplify_path() no longer prepends '/' if '/' is missing.
Callers must check for leading '/' depending on use, such as in
concatenation with

[core] reject decoded url-path without leading '/'

buffer_simplify_path() no longer prepends '/' if '/' is missing.
Callers must check for leading '/' depending on use, such as in
concatenation with others paths, or direct use accessing filesystem

Note: lighttpd 1.4.50 provides the server.http-parseopts directive.
Recommended settings unless specific use requires looser settings:
server.http-parseopts = (
"header-strict" => "enable",
"host-strict" => "enable",
"host-normalize" => "enable",
"url-normalize" => "enable",
"url-normalize-unreserved" => "enable",
"url-normalize-required" => "enable",
"url-ctrls-reject" => "enable",
"url-path-2f-decode" => "enable",
"url-path-dotseg-remove" => "enable",
"url-query-20-plus" => "enable"
)

x-ref:
https://digi.ninja/blog/lighttpd_rewrite_bypass.php

As noted in the link above, mod_access should be preferred instead
of mod_rewrite for access controls to URLs.

show more ...

[core] perf: simpler buffer_string_space() (tests)

[tests] #undef NDEBUG before assert.h in t/test_*

[core] fix buffer_to_upper()

fix buffer_to_upper() and case-insensitive filesystem detection

[tests] move src/test_*.c to src/t/