1. 15 Apr, 2016 3 commits
    • W-Mark Kubacki's avatar
      Support configuring less restrictive TLS client auth requirements · 69c2d78f
      W-Mark Kubacki authored
      Caddyfile parameter "clients" of "tls" henceforth accepts a special
      first modifier. It is one of, and effects:
      
       * request         = tls.RequestClientCert
       * require         = tls.RequireAnyClientCert
       * verify_if_given = tls.VerifyClientCertIfGiven
       * (none)          = tls.RequireAndVerifyClientCert
      
      The use-case for this is as follows: A middleware would serve items to the
      public, but if a certificate were given the middleware would permit file
      manipulation.
      
      And, in a different plugin such as a forum or blog, not verifying a client
      cert would be nice for registration: said blog would subsequently only
      compare the SPKI of a client certificate.
      69c2d78f
    • W-Mark Kubacki's avatar
      Move sanitization of URL.Path to Server · f31875df
      W-Mark Kubacki authored
      No need to have this in every plugin. And, even in flat filesystems
      filenames with dots and slashes are best avoided.
      f31875df
    • W-Mark Kubacki's avatar
      browse: Return HTTP errors on unhandled HTTP methods · 4e98cc30
      W-Mark Kubacki authored
      For example, a HTTP POST should not be answered with StatusOK,
      and a response to HTTP OPTIONS should not carry any contents.
      4e98cc30
  2. 13 Apr, 2016 1 commit
  3. 12 Apr, 2016 3 commits
  4. 11 Apr, 2016 8 commits
  5. 10 Apr, 2016 1 commit
  6. 09 Apr, 2016 4 commits
  7. 06 Apr, 2016 7 commits
  8. 05 Apr, 2016 7 commits
  9. 04 Apr, 2016 1 commit
  10. 03 Apr, 2016 5 commits