X-Git-Url: http://www.privoxy.org/gitweb/?p=privoxy.git;a=blobdiff_plain;f=ChangeLog;h=dead1d7cfd89d2372b9617d82bc3f68024220458;hp=9df4dcff4d2e998e6e533dc39ba4496935622dfd;hb=9f36a5cd42b565b1236068011d67c105004426c2;hpb=5a54001814f48c5fdf3c9fb352af6505e216f6d6 diff --git a/ChangeLog b/ChangeLog index 9df4dcff..dead1d7c 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,15 +5,19 @@ ChangeLog for Privoxy - Fixed last-chunk-detection for responses where the content was small enough to be read with the body, causing Privoxy to wait for the - end of the content until the server closed the connection. - Reported by "Karsten" in #3028326. + end of the content until the server closed the connection or the + request timed out. Reported by "Karsten" in #3028326. - Responses with status code 204 weren't properly detected as body-less - like RFC2616 mandates. Like the previous bug, this caused Privoxy - to wait for the end of the content until the server closed the connection. - Fixes #3022042 and #3025553, reported by a user with no visible name. - Most likely also fixes a bunch of other AJAX-related problem reports - that got closed in the past due to insufficient information and lack - of feedback. + like RFC2616 mandates. Like the previous bug, this caused Privoxy to + wait for the end of the content until the server closed the connection + or the request timed out. Fixes #3022042 and #3025553, reported by a + user with no visible name. Most likely also fixes a bunch of other + AJAX-related problem reports that got closed in the past due to + insufficient information and lack of feedback. +- Fixed an ACL bug that made it impossible to build a blacklist. + Usually the ACL directives are used in a whitelist, which worked + as expected, but blacklisting is still useful for public proxies + where one only needs to deny known abusers access. - Added LOG_LEVEL_RECEIVED to log the not-yet-parsed data read from the network. This should make debugging various parsing issues a lot easier. - The IPv6 code is enabled by default on Windows versions that support it. @@ -45,8 +49,8 @@ ChangeLog for Privoxy - Fix a bunch of anchors that used underscores instead of dashes. - Allow to keep the client connection alive after crunching the previous request. Already opened server connections can be kept alive, too. - - In cgi_show_url_info(), don't forget to prefix URLs that only contain http:// or https:// in the path. - Fixes #2975765 reported by Adam Piggott. + - In cgi_show_url_info(), don't forget to prefix URLs that only contain + http:// or https:// in the path. Fixes #2975765 reported by Adam Piggott. - Show the 404 CGI page if cgi_send_user_manual() is called while local user manual delivery is disabled. @@ -56,97 +60,109 @@ ChangeLog for Privoxy - Block .atemda.com/. Reported by johnd16 in #3002723. - Block js.adlink.net/. Reported by johnd16 in #3002720. - Block .analytics.yahoo.com/. Reported by johnd16 in #3002713. - - fix for ijbswa-Support Requests-3001830: Activate user.filter by default - - Block sb.scorecardresearch.com, too. - Reported by dg1727 in #2992652. + - Block sb.scorecardresearch.com, too. Reported by dg1727 in #2992652. - Fix problems noticed on Yahoo mail and news pages. - Remove the too broad yahoo section, only keeping the fast-redirects exception as discussed on ijbswa-devel@. - - Actionsfile feedback item #2974204 2010-03-21 - don't block adesklets.sourceforge.net - - Actionsfile feedback item #2975895 2010-03-24 - block chartbeat ping tracking + - Don't block adesklets.sourceforge.net. Reported in #2974204. + - Block chartbeat ping tracking. Reported in #2975895. - Tag CSS and image requests with cautious and medium settings, too. - Don't handle view.atdmt.com as image. It's used for click-throughs so users should be able to "go there anyway". Reported by Adam Piggott in #2975927. - - Also let refresh-tags filter invalid refresh tags where the 'url=' - part is missing. Anonymously reported in #2986382. + - Also let the refresh-tags filter remove invalid refresh tags where + the 'url=' part is missing. Anonymously reported in #2986382. While at it, update the description to mention the fact that only refresh tags with refresh times above 9 seconds are covered. - javascript needs to be blocked with +handle-as-empty-document to work around Firefox bug 492459. So move .js blockers from - +block{Might be a web-bug.} -handle-as-empty-document - to - +block{Might be a web-bug.} +handle-as-empty-document - - ijbswa-Feature Requests-3006719 - Block 160x578 Banners - I'm not sure about blocking 160x578 images, but - pagead2.googlesyndication.com/pagead/imagad?xxx - could use blocking. - - Block another omniture tracking domain + +block{Might be a web-bug.} -handle-as-empty-document to + +block{Might be a web-bug.} +handle-as-empty-document. + - ijbswa-Feature Requests-3006719 - Block 160x578 Banners. + - Block another omniture tracking domain. - Added a range-requests tagger. + - Added two sections to get Flickr's Ajax interface working with + default pre-settings. If you change the configuration to block + cookies by default, you'll need additional exceptions. + Reported by Mathias Homann in #3101419 and by Patrick on ijbswa-users@. - Documentation improvements: - - Explicitly mention how to match any URL. - - Consistently recommending socks5 in the Tor FAQ entry and mention + - Explicitly mention how to match all URLs. + - Consistently recommend socks5 in the Tor FAQ entry and mention its advantage compared to socks4a. Reported by David in #2960129. - Slightly improve the explanation of why filtering may appear slower than it is. + - Grammar fixes for the ACL section. + - Fixed a link to the 'intercepting' entry and add another one. + - Rename the 'Other' section to 'Mailing Lists' and reword it + to make it clear that nobody is forced to use the trackers + - Note that 'anonymously' posting on the trackers may not always + be possible. + - Suggest to enable debug 32768 when suspecting parsing problems. - Privoxy-Log-Parser improvements: - - Also gather statistics for blocked requests. - - Also gather statistics for fast redirections. - - In print_stats(), also provide the percentage of keep-alive offers the client accepted. - - Add a --url-statistics-threshold option. - - Also gather statistics for ressources, methods, and HTTP versions + - Gather statistics for ressources, methods, and HTTP versions used by the client. + - Also gather statistics for blocked and redirected requests. + - Provide the percentage of keep-alive offers the client accepted. + - Add a --url-statistics-threshold option. + - Add a --host-statistics-threshold option to also gather + statistics about how many request where made per host. - Fix a bug in handle_loglevel_header() where a 'scan: ' got lost. - - Add a --shorten-thread-ids option to replace the thread id with a decimal number. - - Accept and ignore: Looks like we got the last chunk together with the server headers. We better stop reading. + - Add a --shorten-thread-ids option to replace the thread id with + a decimal number. + - Accept and ignore: Looks like we got the last chunk together + with the server headers. We better stop reading. - Accept and ignore: Continue hack in da house. - Accept and higlight: Rejecting connection from 10.0.0.2. Maximum number of connections reached. - - Accept and highlight actions and filter filte loading: - Loading actions file: /usr/local/etc/privoxy/default.action - Loading filter file: /usr/local/etc/privoxy/default.filter - -- GNUmakefile improvements: - - Use $(SSH) instead of ssh, so one only needs to specify a username once. - - Removed references to the action feedback thingy that hasn't been - working for years. - - Consistently use shell.sourceforge.net instead of shell.sf.net so - one doesn't need to check server fingerprints twice. - - Removed GNUisms in the webserver and webactions targets so they - work with standard tar. + - Accept and highlight: Loading actions file: /usr/local/etc/privoxy/default.action + - Accept and highlight: Loading filter file: /usr/local/etc/privoxy/default.filter + - Accept and highlight: Killed all-caps Host header line: HOST: bestproxydb.com + - Accept and highlight: Reducing expected bytes to 0. Marking + the server socket tainted after throwing 4 bytes away. + - Accept: Merged multiple header lines to: 'X-FORWARDED-PROTO: http X-HOST: 127.0.0.1' - Code cleanups: - - Remove the next member from the client_state struct. - Only the main thread needs access to all client - states so give it its own struct. + - Remove the next member from the client_state struct. Only the main + thread needs access to all client states so give it its own struct. - Garbage-collect request_contains_null_bytes(). - Ditch redundant code in unload_configfile(). - Ditch LogGetURLUnderCursor() which doesn't seem to be used anywhere. - Spotted by cppcheck. - - In write_socket(), remove the write-only variable write_len in an ifdef __OS2__ block. - Spotted by cppcheck. - - In resolve_hostname_to_ip(), limit the scope of the variable 'dns_retries'. - - In connect_to(), don't declare the variable 'flags' on OS/2 where it isn't used. - Spotted by cppcheck. - - In xtoi(), limit the scope of the variable d2. - - In main(), limit the scope of the variable pid. - - In client_if_modified_since(), limit the scope of the variables hours, minutes and seconds. - - In server_last_modified(), limit the scope of the variables days, hours, minutes and seconds. - - In add_to_iob(), limit the scope of the variable 'want' and turn an interestingly looking for loop into a boring while loop. + - In write_socket(), remove the write-only variable write_len in + an ifdef __OS2__ block. Spotted by cppcheck. + - In connect_to(), don't declare the variable 'flags' on OS/2 where + it isn't used. Spotted by cppcheck. + - Limit the scope of various variables. Spotted by cppcheck. + - In add_to_iob(), turn an interestingly looking for loop into a + boring while loop. - Code cleanup in preparation for external filters. - In listen_loop(), mention the socket on which we accepted the connection, not just the source IP address. - In write_socket(), also log the socket we're writing to. - - In log_error(), assert that escaped characters get logged completely or not at all. - - In log_error(), assert that ival and sval have reasonable values. There's no - reason not to abort() if they don't. - - Remove an incorrect cgi_error_unknown() call in a cannnot-happen-situation in send_crunch_response(). - - Clean up white-space in http_response definition and move the crunch_reason to the beginning. - - Turn http_response.reason into an enum and rename it to http_response.crunch_reason. + - In log_error(), assert that escaped characters get logged + completely or not at all. + - In log_error(), assert that ival and sval have reasonable values. + There's no reason not to abort() if they don't. + - Remove an incorrect cgi_error_unknown() call in a + cannot-happen-situation in send_crunch_response(). + - Clean up white-space in http_response definition and + move the crunch_reason to the beginning. + - Turn http_response.reason into an enum and rename it + to http_response.crunch_reason. + - Silence a 'gcc (Debian 4.3.2-1.1) 4.3.2' warning on i686 GNU/Linux. + - Fix white-space in a log message in remove_chunked_transfer_coding(). + While at it, add a note that the message doesn't seem to + be entirely correct and should be improved later on. + +- GNUmakefile improvements: + - Use $(SSH) instead of ssh, so one only needs to specify a username once. + - Removed references to the action feedback thingy that hasn't been + working for years. + - Consistently use shell.sourceforge.net instead of shell.sf.net so + one doesn't need to check server fingerprints twice. + - Removed GNUisms in the webserver and webactions targets so they + work with standard tar. *** Version 3.0.16 Stable ***