CVS commit: pkgsrc

[Hubert Feyrer <hubertf%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   hubertf
Date:           Tue Feb 29 23:31:34 UTC 2000

Modified Files:
        pkgsrc/www/htdig: Makefile
        pkgsrc/www/htdig/files: md5
        pkgsrc/www/htdig/pkg: MESSAGE PLIST

Log Message:
Update to V3.1.5 because of security problems in 3.1.4.

Changes:
   * Fixed a nasty security hole in htsearch, which would allow users to
     view any file on your site that had read permission.
   * Fixed a bug that could cause problems with 8-bit characters on some
     systems.
   * Made some attempts to get htsearch's output to be more HTML 4.0
     compliant. It quotes all HTML tag parameters, and uses ";" instead of
     "&" as parameter separator in URLs for next pages. Reserved characters
     in parameters are now encoded.
   * Fixed handling of SGML entities: htdig will still decode them to store
     as single characters in the database, but htsearch now encodes some of
     them back for compliant results.
   * Added two new formats for variables in htsearch templates, $%(var),
     which escapes the variable for a URL, and $&(var), which HTML-escapes
     the variable as necessary.
   * Fixed htdig's handling of robots.txt, such that only the first
     applicable User-agent field bearing its name will be used, rather than
     only the last.
   * Fixed htdig's handling of servers that return 2-digit years.
   * Fixed handling of embedded quotes in quoted string lists.
   * Fixed handling of relative URLs with trailing ".." or leading "//".
   * Fixed handling of the valid_extensions attribute, which sometimes
     failed in the previous version.
   * Enhanced the handling of local filesystem indexing with the local_urls,
     local_user_urls or local_default_doc attributes, which now allow
     multiple directory or file names to be tried.
   * Added the build_select_lists attribute to allow the config file to
     specify <select> form elements in htsearch output as a template
     variable, much like $(SORT) and $(METHOD).
   * Added support for two additional configuration attributes:
     max_keywords, and nph.
   * A variety of other bug fixes, and many documentation updates. See the
     ChangeLog for details.


To generate a diff of this commit:
cvs rdiff -r1.5 -r1.6 pkgsrc/www/htdig/Makefile
cvs rdiff -r1.3 -r1.4 pkgsrc/www/htdig/files/md5
cvs rdiff -r1.1 -r1.2 pkgsrc/www/htdig/pkg/MESSAGE
cvs rdiff -r1.3 -r1.4 pkgsrc/www/htdig/pkg/PLIST

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.