Commit Graph

645 Commits

Author SHA1 Message Date
Tatsuya Kinoshita
a58f37c94f Update ChangeLog 2018-01-25 18:24:48 +09:00
Tatsuya Kinoshita
01d41d49b2 Add CVE IDs
cf. https://security-tracker.debian.org/tracker/source-package/w3m
2018-01-25 18:23:40 +09:00
Tatsuya Kinoshita
0ca159fbfe Update ChangeLog 2018-01-21 11:27:04 +09:00
Tatsuya Kinoshita
e773a0e089 Update NEWS 2018-01-21 10:34:22 +09:00
Tatsuya Kinoshita
327bb74254 Do not remove w3mdict.cgi when "make distclean" 2018-01-21 10:34:22 +09:00
Tatsuya Kinoshita
18dcbadf27 Make temporary directory safely when ~/.w3m is unwritable 2018-01-21 10:34:11 +09:00
Tatsuya Kinoshita
b592dac63b Suppress error messages when ~/.w3m is unwritable
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871425
2018-01-21 10:33:40 +09:00
Tatsuya Kinoshita
27c8dd7710 Update ChangeLog 2018-01-20 22:20:15 +09:00
Tatsuya Kinoshita
ce8f3e1090 Update config.* with autotools-dev 20171216.1 2018-01-20 22:16:57 +09:00
Tatsuya Kinoshita
8354763b90 Prevent negative indent value in feed_table_block_tag()
Bug-Debian: https://github.com/tats/w3m/issues/88
2018-01-20 21:31:03 +09:00
Tatsuya Kinoshita
707fb45073 Update ChangeLog 2018-01-06 20:24:40 +09:00
Tatsuya Kinoshita
49d4d1e70f Doc fix for ssl_forbid_method 2018-01-06 19:52:35 +09:00
Tatsuya Kinoshita
762e28dc89 Fix multi-character character constant for ssl_forbid_method 2018-01-06 19:49:57 +09:00
se
1b23ebf644 Extend ssl_forbid_method to disable TLSv1.1
Origin: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=874218#5
2018-01-06 19:10:52 +09:00
Tatsuya Kinoshita
d7afaf6808 Accept TERM=fbterm
cf. https://bushowhige.blogspot.jp/2015/01/fbterm-w3m-img.html
2018-01-06 18:19:10 +09:00
Tatsuya Kinoshita
eadbfc2556 Update ChangeLog 2017-12-27 06:45:47 +09:00
Tatsuya Kinoshita
7fdc83b036 Prevent invalid columnPos() call in formUpdateBuffer()
Bug-Debian: https://github.com/tats/w3m/issues/89
2017-12-27 06:43:52 +09:00
Tatsuya Kinoshita
1fd08f383d Typo fix in fusage()
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=878106
2017-12-27 06:42:26 +09:00
Tatsuya Kinoshita
ace7655fa9 English fix
cf. [emacs-w3m:12706], http://emacs-w3m.namazu.org/ml/msg12598.html
2017-12-27 06:41:57 +09:00
Tatsuya Kinoshita
5d783f2433 Update ChangeLog 2017-12-25 07:11:15 +09:00
Tatsuya Kinoshita
64f5b0d7ca Merge branch 'master-dai' 2017-12-25 07:04:35 +09:00
HIGUCHI Daisuke (VDR dai)
57b37c223b fix spelling error 2017-12-25 07:02:21 +09:00
Tatsuya Kinoshita
d69111c101 Update ChangeLog 2017-08-27 23:11:45 +09:00
Tatsuya Kinoshita
455224bb5b Merge pull request #93 from mackyle/master
correct <base ...> parsing and do not turn a form's GET into POST
2017-08-27 23:06:07 +09:00
Kyle J. McKay
89e60cc474 form.c: do not gratuitously turn GET into POST
When encountering a <form ...> tag that contains these values:

    method="get" enctype="multipart/form-data"

Do not transform the method into POST to accomodate enctype.

Instead behave in the compatible way that all other browsers
behave in this instance and ignore the enctype parameter
(treating it as the default application/x-www-form-urlencoded)
and perform a "GET" just as the method parameter requests.

This behavior produces far more compatible results than
gratuitously changing the "get" into a "post" which can
result in unexpected "405 Method Not Allowed" errors.

Signed-off-by: Kyle J. McKay <mackyle@gmail.com>
2017-08-23 13:14:23 -07:00
Kyle J. McKay
d398b40332 file.c: compute correct base URL when not absolute
When a server makes use of the PATH_INFO feature in a CGI,
the returned pages may often have a <base href="..." /> tag
specifying the URL of the CGI itself as the base.

However, to avoid hard-coding the scheme and host into such
a base href, the href value will often omit the scheme, host
and port.

Make sure that when parsing any such base href value that
any omitted components are taken from the current URL rather
than taken as being from a bare, absolute file:/// URL.

Signed-off-by: Kyle J. McKay <mackyle@gmail.com>
2017-08-23 11:48:38 -07:00
Tatsuya Kinoshita
1ac245bdcd Update ChangeLog 2017-01-02 21:43:38 +09:00
Tatsuya Kinoshita
f4d2636c22 Update NEWS 2017-01-02 21:42:25 +09:00
Tatsuya Kinoshita
b17f50f07f Update ChangeLog 2017-01-02 21:38:01 +09:00
Tatsuya Kinoshita
eb4a381380 Update ChangeLog 2016-12-24 21:32:19 +09:00
Tatsuya Kinoshita
00433f4ac2 Prevent overflow beyond the end of string in wtf_parse1()
Bug-Debian: https://github.com/tats/w3m/issues/68
2016-12-24 21:21:49 +09:00
Tatsuya Kinoshita
f51c0966a4 Revert "Prevent overflow beyond the end of string in wtf_parse1()"
This reverts commit 998b6f91d4.
Bug-Debian: https://github.com/tats/w3m/issues/86
cf. http://emacs-w3m.namazu.org/ml/msg12505.html
2016-12-24 14:20:35 +09:00
Tatsuya Kinoshita
eb4130a7cd Preserve one byte for end of string character in form_update_line()
Bug-Debian: https://github.com/tats/w3m/issues/68#issuecomment-266214643
2016-12-24 13:02:41 +09:00
Tatsuya Kinoshita
dc32152dc0 Prevent invalid form_update_line() call in formUpdateBuffer()
Bug-Debian: https://github.com/tats/w3m/issues/82
2016-12-24 12:58:44 +09:00
Tatsuya Kinoshita
d3048fe281 Update ChangeLog 2016-12-20 20:29:35 +09:00
Tatsuya Kinoshita
971b0c1cf9 Revert "Preserve one byte for end of string character in form_update_line()"
This reverts commit a4152aaaea.
2016-12-20 20:20:01 +09:00
Tatsuya Kinoshita
b3805049f2 Update ChangeLog 2016-12-18 01:29:19 +09:00
Tatsuya Kinoshita
f33b7b2df0 Update ChangeLog 2016-12-18 01:26:26 +09:00
Tatsuya Kinoshita
aa2077e06f Prevent heap-use-after-free read in HTMLlineproc0()
Bug-Debian: https://github.com/tats/w3m/issues/81
2016-12-18 01:20:14 +09:00
Tatsuya Kinoshita
7a2675b4a5 Prevent infinite loop in feed_textarea()
Bug-Debian: https://github.com/tats/w3m/issues/85
2016-12-18 00:44:36 +09:00
Tatsuya Kinoshita
5d665be811 Revert "Prevent overflow beyond the end of string in form_update_line()"
This reverts commit 9ccaa1dd0d.
2016-12-18 00:20:15 +09:00
Tatsuya Kinoshita
eba7f423fc Revert "Prevent overflow beyond the end of string in form_update_line()"
This reverts commit e0efc127ff.
2016-12-18 00:20:06 +09:00
Tatsuya Kinoshita
849d1dd239 Update ChangeLog 2016-12-16 00:51:43 +09:00
Tatsuya Kinoshita
c3a3305e03 Prevent overflow beyond the end of string for wtf to wcs macros
Bug-Debian: https://github.com/tats/w3m/issues/77
2016-12-16 00:44:49 +09:00
Tatsuya Kinoshita
922d6f7901 Revert "Prevent overflow beyond the end of string for wtf to wcs macros"
This reverts commit b4d27ba5cc.
2016-12-16 00:44:49 +09:00
Tatsuya Kinoshita
6eea841d3a Prevent overflow beyond the end of string in caller of get_mclen()
Bug-Debian: https://github.com/tats/w3m/issues/59
Bug-Debian: https://github.com/tats/w3m/issues/73
Bug-Debian: https://github.com/tats/w3m/issues/74
Bug-Debian: https://github.com/tats/w3m/issues/76
Bug-Debian: https://github.com/tats/w3m/issues/79
Bug-Debian: https://github.com/tats/w3m/issues/80
Bug-Debian: https://github.com/tats/w3m/issues/83
Bug-Debian: https://github.com/tats/w3m/issues/84
2016-12-16 00:44:44 +09:00
Tatsuya Kinoshita
107810c145 Revert "Prevent overflow beyond the end of string in proc_mchar()"
This reverts commit 512ed467d1.
2016-12-15 22:55:23 +09:00
Tatsuya Kinoshita
2124693540 Revert "Prevent overflow beyond the end of string in visible_length()"
This reverts commit a932f78a6d.
2016-12-15 22:53:04 +09:00
Tatsuya Kinoshita
6622b6520a Revert "Prevent overflow beyond the end of string in skip_space()"
This reverts commit e757b43bcf.
2016-12-15 22:52:05 +09:00
Tatsuya Kinoshita
3cb0915076 Revert "Prevent overflow beyond the end of string in visible_length_plain()"
This reverts commit f763b8ebf5.
2016-12-15 22:45:48 +09:00