http:///0.7/ en-us 0.7 Changelog 0.7 Changelog Merge 0.6->0.7 http:///0.7/rev/8fde6b6b4919 Matthew Wild <mwild1@gmail.com> Thu, 02 Jun 2011 15:23:58 +0100 xmlhandlers/xmppstream: Stop the parser when encountering restricted XML, completing the fix for the billion laughs attack http:///0.7/rev/ee6a18f10a8d Matthew Wild <mwild1@gmail.com> Thu, 02 Jun 2011 15:19:05 +0100 Merge 0.6->0.7 http:///0.7/rev/5a0144a032d8 Matthew Wild <mwild1@gmail.com> Thu, 02 Jun 2011 00:25:44 +0100 xmlhandlers: Don't restrict CDATA http:///0.7/rev/65e2c089d138 Matthew Wild <mwild1@gmail.com> Thu, 02 Jun 2011 00:23:41 +0100 Merge 0.6->0.7 http:///0.7/rev/683523db4fe8 Matthew Wild <mwild1@gmail.com> Wed, 01 Jun 2011 23:25:24 +0100 xmlhandlers: Reject XML comments, processing instructions and (if supported by LuaExpat) DTDs. If not supported, log a warning. [Backport of 7cc426988bcc in trunk] http:///0.7/rev/a37522bf6b1b Matthew Wild <mwild1@gmail.com> Wed, 01 Jun 2011 23:20:54 +0100 certmanager: Don't disable LuaSec and future cert loading on failure, and add error messages to the no LuaSec/config cases (thanks Jakob) http:///0.7/rev/3976bad56640 Matthew Wild <mwild1@gmail.com> Fri, 23 Jul 2010 09:17:11 +0100 mod_privacy: Add service discovery feature. http:///0.7/rev/82b17b199d68 Waqas Hussain <waqas20@gmail.com> Sat, 03 Jul 2010 11:03:06 +0500 mod_privacy: Return the correct item-not-found instead of bad-request when a non-existent list is activated by the client (thanks teo) http:///0.7/rev/9bcf8d612a52 Matthew Wild <mwild1@gmail.com> Fri, 02 Jul 2010 19:55:08 +0100 net.server_select: Clean up buffer and fire drained callback on successful write before we try and start TLS negotiation (if negotiation fails instantly then we can be left without a handler to use for cleanup) (thanks dersd) http:///0.7/rev/88cfe1bba690 Matthew Wild <mwild1@gmail.com> Fri, 02 Jul 2010 17:24:40 +0100