summaryrefslogtreecommitdiff
path: root/cgi-bin
Commit message (Collapse)AuthorAge
* Debian: Move cupsd.conf.default from SERVERROOT to DATADIRDidier Raboud2021-05-27
| | | | | | | Origin: vendor Bug: https://github.com/apple/cups/issues/4342 Bug: https://github.com/OpenPrinting/cups/pull/26 Bug-Debian: https://bugs.debian.org/640124
* cgi-bin/help-index.c: Check node->section before using it in strcmp()Zdenek Dohnal2021-01-29
| | | | | Fixes a segfault in help.cgi, which happens if user tries to search in man pages. Fedora bug #1921881
* Eliminate a bunch of sprintf usage (all looked safe, but I'm puzzled why theseMichael R Sweet2020-10-17
| | | | were still there - I did a sweep many years ago...)
* Web interface: Set the actual device uri, not device_uri|make_model string ↵Zdenek Dohnal2020-09-14
| | | | from html form
* LGTM only supports C++ style comments...Michael R Sweet2019-11-19
|
* Address multiple minor issues reported by the LGTM security scanner:Michael R Sweet2019-11-18
| | | | | | | | - Lots of usage of localtime and gmtime (use _r/_s versions instead - Issue #5685) - Some unnecessary comparisons - Suppress checks that are not useful (header guards, short global names, and the integer overflow checks which don't reflect the actual range of values)
* Merge pull request #5621 from zdohnal/cgigetarray-sigsegvMichael R Sweet2019-10-15
|\ | | | | SIGSEGV in CUPS web ui when adding a printer
| * SIGSEGV in CUPS web ui when adding a printerZdenek Dohnal2019-07-29
| |
* | Fix some PPD parser issues discovered via fuzzing (Issue #5623, Issue #5624)Michael R Sweet2019-08-01
|/
* Update build system and cups-config script to not add extra libraries to theMichael R Sweet2019-05-15
| | | | "--libs" output (Issue #5261)
* More clang warning fixes.Michael R Sweet2019-04-20
|
* Use ALL_DSOFLAGS and ALL_LDFLAGS to avoid issues with some build frameworks.Michael R Sweet2019-03-19
|
* Fix compile warning.Michael R Sweet2019-01-24
|
* Remove remaining references to subscriptions and samba.Michael R Sweet2019-01-24
|
* Clean out some more _cupsStr cruft that might potentially cause anMichael R Sweet2019-01-21
| | | | | | unaligned memory access (Issue #5474) Don't directly use the string pool in the CGI programs or scheduler.
* Switch to using "all" and "media-col-database" because some vendors apparentlyMichael R Sweet2019-01-21
| | | | do not know how to read (Issue #5484)
* Use the same requested-attributes values for all IPP Everywhere setupMichael R Sweet2019-01-21
| | | | requests (Issue #5484)
* CVE-2018-4700: Linux session cookies used a predictable random number seed.Michael R Sweet2018-12-07
|
* Don't install cupscgi, cupsmime, or cupsppdc shared libraries.Michael R Sweet2018-10-29
|
* Don't install/remove private headers for internal libraries.Michael R Sweet2018-10-18
| | | | Don't install symlinks for internal libraries.
* Move debug printfs to internal usage only.Michael R Sweet2018-10-18
| | | | Also, old MD5 code is internal-only.
* Don't install headers for libcupcgi, libcupsmime, or libcupsppdc.Michael R Sweet2018-10-17
|
* Search for codesign/true, use LDFLAGS for shared libraries (Issue #5411)Michael R Sweet2018-10-15
|
* Migrate Windows conditional code to _WIN32 define.Michael R Sweet2018-10-10
|
* Add code signing for macOS Mojave.Michael R Sweet2018-09-18
|
* Fix memory leaks found by Coverity (Issue #5375)Michael R Sweet2018-08-21
|
* Replace the rest of the uses of __attribute__ that need to be portable ↵Michael R Sweet2018-07-09
| | | | (Issue #5349)
* More tweaks for IPP Everywhere support in web interface.Michael R Sweet2018-06-18
|
* Support IPP Everywhere driver in web interface (Issue #5338)Michael R Sweet2018-06-18
|
* Move libcupsimage to the "cups" subdirectory, along with its unit tests andMichael R Sweet2018-01-18
| | | | benchmark.
* Online help fixes.Michael Sweet2017-12-19
| | | | | | | | | | | | | cgi-bin/help-index.c: - Fix indexing of indented comments, body elements, etc. - Add support for anchors via ID attribute. - Fix anchor scanning bug when the anchor name is quoted. cgi-bin/testhi.c: - Add support for specifying section and directory to index. doc/help/*.html: - Fix headings and anchors.
* Support <body> being indented.Michael Sweet2017-12-18
|
* License change: Apache License, Version 2.0.Michael R Sweet2017-11-07
|
* Support the latest HTTP Digest authentication specification (Issue #4862)Michael R Sweet2017-11-06
| | | | | | | | | | | | | | | | | | | | | | | Also deprecates all httpMD5* functions. - cgi-bin/var.c: Use cupsHashData to compute SID hash. - cups/auth.c: Rewrite WWW-Authenticate parser to support multiple auth schemes and the new RFC 7616 version of HTTP Digest. - cups/cups.h: Add cupsHashString function to get a hex version of a hash. - cups/hash.c: Add MD5 support. - cups/http.c: Track WWW-Authenticate in a long string, concatenate new set values. - cups/http.h: Deprecate httpMD5* and recommend cupsDoAuth and cupsHash*. - cups/http-private.h: Pull MD5 stuff, nonce_count is unsigned, track WWW-Authenticate header as a potentially long string. - cups/http-support.c: Use cupsHashData to compute UUID hash. - cups/md5.c: Comment everything out if we have an OS-supplied MD5 hash function. - cups/md5passwd.c: Use cupsHash* functions. - cups/tls-*.c: Use cupsHash* functions. - cups/versioning.h: Add CUPS_API_2_3 definition. - scheduler/client.c: Update WWW-Authenticate header to include AuthRef, Local, and PeerCred schemes with parameters as needed.
* No longer support backslash, question mark, or quotes in printer names ↵Michael R Sweet2017-11-01
| | | | (Issue #4966)
* Drop RSS subscription management from the web interface (Issue #5012)Michael R Sweet2017-11-01
|
* Fix more issues with libtool support (Issue #5050)Michael R Sweet2017-07-17
|
* Update libtool support to include --mode=foo stuff - surprise, libtool ↵Michael R Sweet2017-07-17
| | | | | | changed in incompatible ways again... (Issue #5050)
* Fix some (bogus) clang warnings.Michael Sweet2017-06-16
|
* Fix source file header text duplication text duplication.Michael R Sweet2017-01-16
| | | | Bump copyright to 2017 in web interface and README files.
* Improve performance of web interface with large numbers of jobs (Issue #3819)Michael Sweet2016-05-25
| | | | | | Also re-work web interface to not allow the order to be changed (since that will negatively impact performance) but instead add first/last buttons to the pager.
* Merge pull request #4792 from OdyX/fix-spelling-error-in-ipp-varMichael R Sweet2016-04-21
|\ | | | | Fix spelling error in 'returning'
| * Fix spelling error in 'returning'Didier Raboud2016-03-25
| |
* | Drop API help for CGI, MIME, and PPD compiler libraries.Michael Sweet2016-04-12
| | | | | | | | Don't uninstall public headers, these are all now private headers.
* | Move CGI, PPD compiler, and MIME heades to the private headers directory.Michael Sweet2016-04-12
| |
* | Remove all of the Subversion keywords from various source files.Michael R Sweet2016-04-11
|/
* Add cupsRasterInitPWGHeader API to setup a raster header using IPP Everywheremsweet2015-12-18
| | | | | | | attribute values. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@13024 a1ca3aef-8c08-0410-bb20-df032aa958be
* Add support for hashed job-password values; right now just SHA-1 and SHA-2 ↵msweet2015-11-18
| | | | | | | | | | | | | | | | hashes (<rdar://problem/20221502>) - Add new cupsHashData API - Use cupsHashData in _cupsConvertOptions. - Grab the job-password-encryption-supported value from the printer and pick the most secure hash that is supported. - Add a new _CUPS_API_2_2 availability macro. - Update dependencies and Xcode project settings. git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12983 a1ca3aef-8c08-0410-bb20-df032aa958be
* The web search incorrectly searched time-at-xxx values (STR #4652)msweet2015-06-30
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12768 a1ca3aef-8c08-0410-bb20-df032aa958be
* Security: Fix CERT VU #810572 exploiting the dynamic linker (STR #4609)msweet2015-06-08
| | | | git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@12700 a1ca3aef-8c08-0410-bb20-df032aa958be