From dc80a8219d68d1e25821219e0b3b5bcda5bae21e Mon Sep 17 00:00:00 2001 From: Fabian Keil Date: Sun, 17 Jan 2016 14:33:26 +0000 Subject: [PATCH] Rebuild HTML docs for 3.0.24 --- .../developer-manual/documentation.html | 2 +- doc/webserver/developer-manual/index.html | 2 +- .../developer-manual/newrelease.html | 6 +- doc/webserver/faq/copyright.html | 6 +- doc/webserver/faq/index.html | 14 +- doc/webserver/faq/misc.html | 14 +- doc/webserver/faq/trouble.html | 6 +- doc/webserver/index.html | 23 +- doc/webserver/privoxy-index.html | 28 +- doc/webserver/user-manual/actions-file.html | 58 +++-- doc/webserver/user-manual/appendix.html | 32 +-- doc/webserver/user-manual/config.html | 4 +- doc/webserver/user-manual/configuration.html | 12 +- doc/webserver/user-manual/contact.html | 4 +- doc/webserver/user-manual/copyright.html | 18 +- doc/webserver/user-manual/filter-file.html | 6 +- doc/webserver/user-manual/index.html | 26 +- doc/webserver/user-manual/installation.html | 8 +- doc/webserver/user-manual/introduction.html | 10 +- doc/webserver/user-manual/quickstart.html | 6 +- doc/webserver/user-manual/seealso.html | 4 +- doc/webserver/user-manual/startup.html | 8 +- doc/webserver/user-manual/templates.html | 4 +- doc/webserver/user-manual/whatsnew.html | 244 +++++++++++++++--- 24 files changed, 371 insertions(+), 174 deletions(-) diff --git a/doc/webserver/developer-manual/documentation.html b/doc/webserver/developer-manual/documentation.html index 44690e89..4c9dbc15 100644 --- a/doc/webserver/developer-manual/documentation.html +++ b/doc/webserver/developer-manual/documentation.html @@ -384,7 +384,7 @@ p-version: the Privoxy version string, e.g. - "3.0.23". + "3.0.24". diff --git a/doc/webserver/developer-manual/index.html b/doc/webserver/developer-manual/index.html index 8d46fba9..05d8199a 100644 --- a/doc/webserver/developer-manual/index.html +++ b/doc/webserver/developer-manual/index.html @@ -39,7 +39,7 @@ entirely correct. As always, patches are welcome.

Please note that this document is constantly evolving. This copy - represents the state at the release of version 3.0.23. You can find + represents the state at the release of version 3.0.24. You can find the latest version of the this manual at http://www.privoxy.org/developer-manual/. Please have a diff --git a/doc/webserver/developer-manual/newrelease.html b/doc/webserver/developer-manual/newrelease.html index 3445784e..a921d8f0 100644 --- a/doc/webserver/developer-manual/newrelease.html +++ b/doc/webserver/developer-manual/newrelease.html @@ -738,7 +738,7 @@ 

-  debchange -v 3.0.23-stable-1 "New upstream version"
+  debchange -v 3.0.24-stable-1 "New upstream version"
@@ -757,7 +757,7 @@

This will create ../privoxy_3.0.23-stable-1_i386.deb which can be + "FILENAME">../privoxy_3.0.24-stable-1_i386.deb which can be uploaded. To upload the package to Sourceforge, simply issue

@@ -1090,7 +1090,7 @@ column, and click Add Release. You will then need to create a new release for your package, using the format of $VERSION ($CODE_STATUS), e.g. 3.0.23 (beta).

+ "emphasis">3.0.24 (beta).

Now just follow the prompts. Be sure to add any appropriate Release notes. You should see your freshly uploaded packages in 7. Privoxy Copyright, License and History -

Copyright © 2001-2015 by Privoxy Developers Copyright © 2001-2016 by Privoxy Developers

@@ -55,7 +55,7 @@ "APPLICATION">Privoxy.

-

7.1. License

+

7.1. License

Privoxy is free software; you can redistribute it and/or modify it under the terms of the

-

7.2. History

+

7.2. History

A long time ago, there was the Internet Junkbuster, by Anonymous Coders and Junkbusters Corporation. diff --git a/doc/webserver/faq/index.html b/doc/webserver/faq/index.html index 447999b6..2834cd69 100644 --- a/doc/webserver/faq/index.html +++ b/doc/webserver/faq/index.html @@ -22,7 +22,7 @@ 2001-2014 by Privoxy Developers

-

$Id: faq.sgml,v 2.107 2014/12/19 12:31:46 fabiankeil +

$Id: faq.sgml,v 2.109 2015/08/12 10:40:42 fabiankeil Exp $

@@ -66,7 +66,7 @@

Please note that this document is a work in progress. This copy - represents the state at the release of version 3.0.23. You can find + represents the state at the release of version 3.0.24. You can find the latest version of the document at http://www.privoxy.org/faq/. Please see the "crunch"? -

4.21. Can Privoxy effect files +
4.21. Can Privoxy affect files that I download from a webserver? FTP server?
4.22. I just downloaded a Perl @@ -387,14 +387,14 @@
-
5.1. I cannot connect to any +
5.1. I cannot connect to any websites. Or, I am getting "connection refused" message with every web page. Why?
5.2. Why am I getting a 503 Error (WSAECONNREFUSED) on every page?
-
5.3. I just added a new rule, +
5.3. I just added a new rule, but the steenkin ad is still getting through. How?
5.4. One of my favorite sites @@ -520,9 +520,9 @@
-
7.1. License
+
7.1. License
-
7.2. History
+
7.2. History
diff --git a/doc/webserver/faq/misc.html b/doc/webserver/faq/misc.html index a3084807..03a8296a 100644 --- a/doc/webserver/faq/misc.html +++ b/doc/webserver/faq/misc.html @@ -594,7 +594,7 @@

4.21. Can Privoxy - effect files that I download from a webserver? FTP server?

+ affect files that I download from a webserver? FTP server?

From the webserver's perspective, there is no difference between viewing a document (i.e. a page), and downloading a file. The same is @@ -855,11 +855,13 @@ Privoxy, or maybe something that is based on the real Privoxy, but has been modified.

-

Lately there have been reports of problems with some kind of Privoxy - versions that come preinstalled on some Netbooks. Some of the problems - described are inconsistent with the behaviour of official Privoxy - versions, which suggests that the preinstalled software may contain - vendor modifications that we don't know about and thus can't debug.

+

Lately there have been reports of problems with some kind of + "parental control" software based on Privoxy that came preinstalled on + certain ASUS Netbooks. The problems described are inconsistent with + the behaviour of official Privoxy versions, which suggests that the + preinstalled software may contain vendor modifications that we don't + know about and thus can't debug.

Privoxy's license allows vendor modifications, but the vendor has to comply with the license, which diff --git a/doc/webserver/faq/trouble.html b/doc/webserver/faq/trouble.html index 2ad328da..cab801a3 100644 --- a/doc/webserver/faq/trouble.html +++ b/doc/webserver/faq/trouble.html @@ -44,7 +44,7 @@ Troubleshooting

-

5.1. I cannot connect +

5.1. I cannot connect to any websites. Or, I am getting "connection refused" message with every web page. Why?

@@ -94,7 +94,7 @@

-

5.3. I just added a +

5.3. I just added a new rule, but the steenkin ad is still getting through. How?

If the ad had been displayed before you added its URL, it will @@ -244,7 +244,7 @@ Request: 66.70.21.80/scripts/click.php?hid=a71b9f6504b0c5681fa5&si=Ua

5.5. After installing Privoxy, I have to log in every time I start IE. What gives?

-

This is a quirk that effects the installation of This is a quirk that affects the installation of Privoxy, in conjunction with Internet Explorer and Internet Connection Sharing on Windows 2000 and Windows XP. The symptoms may appear to be corrupted or invalid DUN settings, or diff --git a/doc/webserver/index.html b/doc/webserver/index.html index 1d58bd84..9acaa2b1 100644 --- a/doc/webserver/index.html +++ b/doc/webserver/index.html @@ -52,7 +52,7 @@

The most recent release is 3.0.23 (stable).

+ "_top">3.0.24 (stable).

@@ -60,13 +60,13 @@

Download

-

- Privoxy downloads are available at - SourceForge. - If you are not comfortable with downloading binaries from SourceForge, please - use the mirror. -

- + +

Privoxy downloads are available at SourceForge. If you are not comfortable with downloading + binaries from SourceForge, please use the + mirror.

@@ -79,6 +79,7 @@

Quickstart after installation

+

  • User manual

    @@ -143,10 +144,10 @@
    -

    +

    - +
    • @@ -166,7 +167,7 @@
    -

    Copyright © 2001-2015 by Privoxy Developers

    +

    Copyright © 2001-2016 by Privoxy Developers

    diff --git a/doc/webserver/privoxy-index.html b/doc/webserver/privoxy-index.html index d991185a..b9de3278 100644 --- a/doc/webserver/privoxy-index.html +++ b/doc/webserver/privoxy-index.html @@ -19,7 +19,7 @@

    Privoxy - The Privacy Enhancing Proxy

    -

    Project Index Page v3.0.23

    +

    Project Index Page v3.0.24

    @@ -61,17 +61,12 @@

    Download

    - +

    Privoxy downloads are available at SourceForge. If you are not comfortable with downloading + binaries from SourceForge, please use the + mirror.

    @@ -80,6 +75,11 @@

    Documentation

    diff --git a/doc/webserver/user-manual/actions-file.html b/doc/webserver/user-manual/actions-file.html index 8c00ca93..e3e6de43 100644 --- a/doc/webserver/user-manual/actions-file.html +++ b/doc/webserver/user-manual/actions-file.html @@ -6,7 +6,7 @@ Actions Files - + @@ -21,7 +21,7 @@ - + @@ -117,7 +117,7 @@ in default.action are:

    - +

    Table 1. Default Configurations

    @@ -314,7 +314,7 @@ actions.

    -

    8.1. Finding the Right +

    8.1. Finding the Right Mix

    Note that some actions, like @@ -339,7 +339,7 @@

    -

    8.2. How to +

    8.2. How to Edit

    The easiest way to edit the actions files is with a browser by using @@ -644,7 +644,7 @@

    -

    8.4.2. The Path +

    8.4.2. The Path Pattern

    Privoxy uses Type:

    -

    Parameterized.

    +

    Multi-value.

    Parameter:
    @@ -1277,7 +1277,7 @@
    Type:
    -

    Parameterized.

    +

    Multi-value.

    Parameter:
    @@ -2026,7 +2026,7 @@ problem-host.example.com
    Type:
    -

    Parameterized.

    +

    Multi-value.

    Parameter:
    @@ -2246,7 +2246,7 @@ problem-host.example.com
    Type:
    -

    Parameterized.

    +

    Multi-value.

    Parameter:
    @@ -2794,7 +2794,7 @@ problem-host.example.com
    Type:
    -

    Multi-value.

    +

    Parameterized.

    Parameter:
    @@ -2833,6 +2833,30 @@ problem-host.example.com "forward-socks5" for socks5 connections (with remote DNS resolution).

    + +
  • +

    "forward-webserver + 127.0.0.1:80" to use the HTTP server listening at + 127.0.0.1 port 80 without adjusting the request + headers.

    + +

    This makes it more convenient to use Privoxy to make + existing websites available as onion services as well.

    + +

    Many websites serve content with hardcoded URLs and + can't be easily adjusted to change the domain based on the + one used by the client.

    + +

    Putting Privoxy between Tor and the webserver (or an + stunnel that forwards to the webserver) allows to rewrite + headers and content to make client and server happy at the + same time.

    + +

    Using Privoxy for webservers that are only reachable + through onion addresses and whose location is supposed to + be secret is not recommended and should not be necessary + anyway.

    +
    • @@ -4119,7 +4143,7 @@ www.privoxy.org/user-manual/
    Type:
    -

    Parameterized.

    +

    Multi-value.

    Parameter:
    @@ -4192,7 +4216,7 @@ example.org/instance-that-is-delivered-as-xml-but-is-not
    Type:
    -

    Parameterized.

    +

    Multi-value.

    Parameter:
    @@ -4489,7 +4513,7 @@ TAG:^image/

    -

    8.5.36. +

    8.5.36. Summary

    Note that many of these actions have the potential to cause a page @@ -4648,7 +4672,7 @@ TAG:^image/ together:

    -

    8.7.1. +

    8.7.1. match-all.action

    Remember all actions @@ -4697,7 +4721,7 @@ TAG:^image/

    -

    8.7.2. +

    8.7.2. default.action

    If you aren't a developer, there's no need for you to edit the @@ -5040,7 +5064,7 @@ wiki.

    -

    8.7.3. +

    8.7.3. user.action

    So far we are painting with a broad brush by setting general diff --git a/doc/webserver/user-manual/appendix.html b/doc/webserver/user-manual/appendix.html index 0e3f0629..362bdebc 100644 --- a/doc/webserver/user-manual/appendix.html +++ b/doc/webserver/user-manual/appendix.html @@ -6,7 +6,7 @@ Appendix - + @@ -19,7 +19,7 @@

    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + @@ -293,7 +293,7 @@
    -

    14.2. Privoxy's +

    14.2. Privoxy's Internal Pages

    Since Privoxy proxies each @@ -313,7 +313,7 @@

    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + diff --git a/doc/webserver/user-manual/configuration.html b/doc/webserver/user-manual/configuration.html index 27902ceb..f932b902 100644 --- a/doc/webserver/user-manual/configuration.html +++ b/doc/webserver/user-manual/configuration.html @@ -6,7 +6,7 @@ Privoxy Configuration - + @@ -20,7 +20,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + @@ -46,7 +46,7 @@ controlled easily with a web browser.

    -

    6.1. Controlling Privoxy +

    6.1. Controlling Privoxy with Your Web Browser

    Privoxy's user interface can be @@ -63,8 +63,8 @@ -

        Privoxy Menu

    +

        Privoxy Menu
    @@ -104,7 +104,7 @@
    diff --git a/doc/webserver/user-manual/contact.html b/doc/webserver/user-manual/contact.html index e787713a..ebb5e3c3 100644 --- a/doc/webserver/user-manual/contact.html +++ b/doc/webserver/user-manual/contact.html @@ -7,7 +7,7 @@ Requests - + - + diff --git a/doc/webserver/user-manual/copyright.html b/doc/webserver/user-manual/copyright.html index 7b220e65..c84b7353 100644 --- a/doc/webserver/user-manual/copyright.html +++ b/doc/webserver/user-manual/copyright.html @@ -6,7 +6,7 @@ Privoxy Copyright, License and History - + @@ -22,7 +22,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    -         ▪  Documentation
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + @@ -42,7 +42,7 @@

    12. Privoxy Copyright, License and History

    -

    Copyright © 2001-2015 by Privoxy Developers Copyright © 2001-2016 by Privoxy Developers

    @@ -493,7 +493,8 @@ Public License instead of this License. provided patches, made suggestions, donated or contributed in some other way. These include (in alphabetical order):

    -

     Anatoly Arzhnikov
    +

     Rustam Abdullaev
    +  Anatoly Arzhnikov
     Ken Arromdee
     Natxo Asenjo
     Devin Bayer
    @@ -505,6 +506,7 @@ Public License instead of this License.  Andrew J. Caines
     Clifford Caoile
     Edward Carrel
    +  Pak Chan
     Wan-Teh Chang
     Sam Chen
     Ramkumar Chinchani
    @@ -542,7 +544,9 @@ Public License instead of this License.  Julien Joubert
     Ralf Jungblut
     Petr Kadlec
    +  Robert Klemme
     Steven Kolins
    +  Korda
     Stefan Kurtz
     Zeno Kugy
     David Laight
    @@ -556,6 +560,7 @@ Public License instead of this License.  Raphael Marichez
     Francois Marier
     Angelina Matson
    +  Jonathan McKenzie
     David Mediavilla
     Raphael Moll
     Mathew Murphy
    @@ -571,6 +576,7 @@ Public License instead of this License.  Maynard Riley
     Andreas Rutkauskas
     Bart Schelstraete
    +  Gregory Seidman
     Chung-chieh Shan
     Benjamin C. Wiley Sittler
     Simon South
    @@ -581,6 +587,8 @@ Public License instead of this License.  Peter Thoenen
     Martin Thomas
     Reuben Thomas
    +  Guybrush Threepwood
    +  Joel Verhagen
     Bobby G. Vinyard
     Jochen Voss
     David Wagner
    @@ -589,6 +597,8 @@ Public License instead of this License.  Jörg Weinmann
     Darren Wiebe
     Anduin Withers
    +  Yang Xia
    +  Jarry Xu
     Oliver Yeoh
     Jamie Zawinski

    diff --git a/doc/webserver/user-manual/filter-file.html b/doc/webserver/user-manual/filter-file.html index 16e93f01..f6260da2 100644 --- a/doc/webserver/user-manual/filter-file.html +++ b/doc/webserver/user-manual/filter-file.html @@ -6,7 +6,7 @@ Filter Files - + @@ -20,7 +20,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + @@ -177,7 +177,7 @@ FILTER: foo Replace all "foo" with "bar" started.

    -

    9.1. Filter File +

    9.1. Filter File Tutorial

    Now, let's complete our "foo" content diff --git a/doc/webserver/user-manual/index.html b/doc/webserver/user-manual/index.html index e433d737..f1d7c474 100644 --- a/doc/webserver/user-manual/index.html +++ b/doc/webserver/user-manual/index.html @@ -3,7 +3,7 @@ - Privoxy 3.0.23 User Manual + Privoxy 3.0.24 User Manual @@ -16,14 +16,14 @@ "#840084" alink="#0000FF">

    -

    Privoxy 3.0.23 User +

    Privoxy 3.0.24 User Manual

    Copyright © 2001-2014 by Privoxy Developers

    -

    $Id: user-manual.sgml,v 2.194 2014/10/21 15:30:52 +

    $Id: user-manual.sgml,v 2.197 2016/01/16 12:30:58 fabiankeil Exp $

    @@ -173,7 +173,7 @@
    -
    6.1. Controlling Privoxy +
    6.1. Controlling Privoxy with Your Web Browser
    6.2. Configuration @@ -348,10 +348,10 @@
    -
    8.1. Finding the Right +
    8.1. Finding the Right Mix
    -
    8.2. How to Edit
    +
    8.2. How to Edit
    8.3. How Actions are Applied to Requests
    @@ -364,7 +364,7 @@
    8.4.1. The Host Pattern
    -
    8.4.2. The Path +
    8.4.2. The Path Pattern
    8.4.3. The Tag @@ -485,7 +485,7 @@ "actions-file.html#SET-IMAGE-BLOCKER">set-image-blocker
    8.5.36. Summary
    + "actions-file.html#AEN4638">Summary
    @@ -497,13 +497,13 @@
    8.7.1. match-all.action
    + "actions-file.html#AEN4702">match-all.action
    8.7.2. default.action
    + "actions-file.html#AEN4724">default.action
    8.7.3. user.action
    + "actions-file.html#AEN4837">user.action
    @@ -513,7 +513,7 @@
    -
    9.1. Filter File +
    9.1. Filter File Tutorial
    9.2. The @@ -584,7 +584,7 @@
    14.1. Regular Expressions
    -
    14.2. Privoxy's Internal +
    14.2. Privoxy's Internal Pages
    14.3. Chain of Events
    diff --git a/doc/webserver/user-manual/installation.html b/doc/webserver/user-manual/installation.html index a8a2e0b8..1e55d6b1 100644 --- a/doc/webserver/user-manual/installation.html +++ b/doc/webserver/user-manual/installation.html @@ -6,7 +6,7 @@ Installation - + @@ -20,7 +20,7 @@

    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + @@ -252,8 +252,8 @@ diff --git a/doc/webserver/user-manual/introduction.html b/doc/webserver/user-manual/introduction.html index 20cfe39a..366196de 100644 --- a/doc/webserver/user-manual/introduction.html +++ b/doc/webserver/user-manual/introduction.html @@ -6,8 +6,8 @@ Introduction - - + + @@ -20,7 +20,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual 
    - tar xzvf privoxy-3.0.23-stable-src.tar.gz
- cd privoxy-3.0.23-stable
+ tar xzvf privoxy-3.0.24-stable-src.tar.gz
+ cd privoxy-3.0.24-stable
    - + @@ -41,7 +41,7 @@ Introduction

    This documentation is included with the current stable version of - Privoxy, 3.0.23.

    + Privoxy, 3.0.24.

    1.1. @@ -157,7 +157,7 @@

    - diff --git a/doc/webserver/user-manual/quickstart.html b/doc/webserver/user-manual/quickstart.html index fd058087..d36bbb56 100644 --- a/doc/webserver/user-manual/quickstart.html +++ b/doc/webserver/user-manual/quickstart.html @@ -6,7 +6,7 @@ Quickstart to Using Privoxy - + @@ -21,7 +21,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    Privoxy 3.0.23 User + Privoxy 3.0.24 User Manual  
    - + @@ -343,7 +343,7 @@ "GUIBUTTON">Edit":

    - +

    Figure 1. Actions Files in Use

    diff --git a/doc/webserver/user-manual/seealso.html b/doc/webserver/user-manual/seealso.html index 7ebc4803..b748c488 100644 --- a/doc/webserver/user-manual/seealso.html +++ b/doc/webserver/user-manual/seealso.html @@ -6,7 +6,7 @@ See Also - + @@ -21,7 +21,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + diff --git a/doc/webserver/user-manual/startup.html b/doc/webserver/user-manual/startup.html index 920e5789..afc3a4b1 100644 --- a/doc/webserver/user-manual/startup.html +++ b/doc/webserver/user-manual/startup.html @@ -6,7 +6,7 @@ Starting Privoxy - + @@ -21,7 +21,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + @@ -55,7 +55,7 @@ protocols.

    - +

    Figure 2. Proxy Configuration Showing Mozilla/Netscape HTTP and HTTPS (SSL) Settings

    @@ -112,7 +112,7 @@ only HTTP and HTTPS (SSL)!

    - +

    Figure 3. Proxy Configuration Showing Internet Explorer HTTP and HTTPS (Secure) Settings

    diff --git a/doc/webserver/user-manual/templates.html b/doc/webserver/user-manual/templates.html index c313d83a..f2fdda10 100644 --- a/doc/webserver/user-manual/templates.html +++ b/doc/webserver/user-manual/templates.html @@ -6,7 +6,7 @@ Privoxy's Template Files - +
    - + diff --git a/doc/webserver/user-manual/whatsnew.html b/doc/webserver/user-manual/whatsnew.html index 34a20426..efd6daf6 100644 --- a/doc/webserver/user-manual/whatsnew.html +++ b/doc/webserver/user-manual/whatsnew.html @@ -6,7 +6,7 @@ What's New in this Release - + @@ -21,7 +21,7 @@
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual
    - + @@ -41,46 +41,116 @@

    3. What's New in this Release

    -

    Privoxy 3.0.23 stable is a bug-fix - release, some of the fixed bugs are security issues:

    +

    Privoxy 3.0.24 stable contains a + couple of new features but is mainly a bug-fix release. Two of the fixed + bugs are security issues (CVE requests pending) and may be used to + remotely trigger crashes on platforms that carefully check memory + accesses (most don't).

      +
    • +

      Security fixes (denial of service):

      + +
        +
      • +

        Prevent invalid reads in case of corrupt chunk-encoded + content. Bug discovered with afl-fuzz and AddressSanitizer.

        +
        • + +
      • +

        Remove empty Host headers in client requests. Previously they + would result in invalid reads. Bug discovered with afl-fuzz and + AddressSanitizer.

        +
        • +
      +
      • +

    • Bug fixes:

      • -

        Fixed a DoS issue in case of client requests with incorrect - chunk-encoded body. When compiled with assertions enabled (the - default) they could previously cause Privoxy to abort(). Reported - by Matthew Daley. CVE-2015-1380.

        +

        When using socks5t, send the request body optimistically as + well. Previously the request body wasn't guaranteed to be sent at + all and the error message incorrectly blamed the server. Fixes + #1686 reported by Peter Müller and G4JC.

        +
        • + +
      • +

        Fixed buffer scaling in execute_external_filter() that could + lead to crashes. Submitted by Yang Xia in #892.

        +
        • + +
      • +

        Fixed crashes when executing external filters on platforms + like Mac OS X. Reported by Jonathan McKenzie on ijbswa-users@

        +
        • + +
      • +

        Properly parse ACL directives with ports when compiled with + HAVE_RFC2553. Previously the port wasn't removed from the host + and in case of 'permit-access 127.0.0.1 example.org:80' Privoxy + would try (and fail) to resolve "example.org:80" instead of + example.org. Reported by Pak Chan on ijbswa-users@.

        +
        • + +
      • +

        Check requests more carefully before serving them forcefully + when blocks aren't enforced. Privoxy always adds the force token + at the beginning of the path, but would previously accept it + anywhere in the request line. This could result in requests being + served that should be blocked. For example in case of pages that + were loaded with force and contained JavaScript to create + additionally requests that embed the origin URL (thus inheriting + the force prefix). The bug is not considered a security issue and + the fix does not make it harder for remote sites to intentionally + circumvent blocks if Privoxy isn't configured to enforce them. + Fixes #1695 reported by Korda.

        +
        • + +
      • +

        Normalize the request line in intercepted requests to make + rewriting the destination more convenient. Previously rewrites + for intercepted requests were expected to fail unless $hostport + was being used, but they failed "the wrong way" and would result + in an out-of-memory message (vanilla host patterns) or a crash + (extended host patterns). Reported by "Guybrush Threepwood" in + #1694.

      • -

        Fixed multiple segmentation faults and memory leaks in the - pcrs code. This fix also increases the chances that an invalid - pcrs command is rejected as such. Previously some invalid - commands would be loaded without error. Note that Privoxy's pcrs - sources (action and filter files) are considered trustworthy - input and should not be writable by untrusted third-parties. - CVE-2015-1381.

        +

        Enable socket lingering for the correct socket. Previously it + was repeatedly enabled for the listen socket instead of for the + accepted socket. The bug was found by code inspection and did not + cause any (reported) issues.

      • -

        Fixed an 'invalid read' bug which could at least theoretically - cause Privoxy to crash. So far, no crashes have been observed. - CVE-2015-1382.

        +

        Detect and reject parameters for parameter-less actions. + Previously they were silently ignored.

      • -

        Compiles with --disable-force again. Reported by Kai - Raven.

        +

        Fixed invalid reads in internal and outdated pcre code. Found + with afl-fuzz and AddressSanitizer.

      • -

        Client requests with body that can't be delivered no longer - cause pipelined requests behind them to be rejected as invalid. - Reported by Basil Hussain.

        +

        Prevent invalid read when loading invalid action files. Found + with afl-fuzz and AddressSanitizer.

        +
        • + +
      • +

        Windows build: Use the correct function to close the event + handle. It's unclear if this bug had a negative impact on + Privoxy's behaviour. Reported by Jarry Xu in #891.

        +
        • + +
      • +

        In case of invalid forward-socks5(t) directives, use the + correct directive name in the error messages. Previously they + referred to forward-socks4t failures. Reported by Joel Verhagen + in #889.

      • @@ -90,13 +160,65 @@
      • -

        If a pcrs command is rejected as invalid, Privoxy now logs the - cause of the problem as text. Previously the pcrs error code was - logged.

        +

        Set NO_DELAY flag for the accepting socket. This significantly + reduces the latency if the operating system is not configured to + set the flag by default. Reported by Johan Sintorn in #894.

        +
        • + +
      • +

        Allow to build with mingw x86_64. Submitted by Rustam + Abdullaev in #135.

        +
        • + +
      • +

        Introduce the new forwarding type 'forward-webserver'. + Currently it is only supported by the forward-override{} action + and there's no config directive with the same name. The + forwarding type is similar to 'forward', but the request line + only contains the path instead of the complete URL.

        +
        • + +
      • +

        The CGI editor no longer treats 'standard.action' special. + Nowadays the official "standards" are part of default.action and + there's no obvious reason to disallow editing them through the + cgi editor anyway (if the user decided that the lack of + authentication isn't an issue in her environment).

        +
        • + +
      • +

        Improved error messages when rejecting intercepted requests + with unknown destination.

      • -

        The tests are less likely to cause false positives.

        +

        A couple of log messages now include the number of active + threads.

        +
        • + +
      • +

        Removed non-standard Proxy-Agent headers in HTTP snipplets to + make testing more convenient.

        +
        • + +
      • +

        Include the error code for pcre errors Privoxy does not + recognize.

        +
        • + +
      • +

        Config directives with numerical arguments are checked more + carefully.

        +
        • + +
      • +

        Privoxy's malloc() wrapper has been changed to prevent + zero-size allocations which should only occur as the result of + bugs.

        +
        • + +
      • +

        Various cosmetic changes.

      @@ -106,13 +228,42 @@
      • -

        '.sify.com/' is no longer blocked. Apparently it is not - actually a pure tracking site (anymore?). Reported by Andrew on - ijbswa-users@.

        +

        Unblock ".deutschlandradiokultur.de/". Reported by u302320 in + #924.

        +
        • + +
      • +

        Add two fast-redirect exceptions for "yandex.ru".

        +
        • + +
      • +

        Disable filter{banners-by-size} for ".plasmaservice.de/".

      • -

        Unblock banners on .amnesty.de/ which aren't ads.

        +

        Unblock klikki.fi/adv/.

        +
        • + +
      • +

        Block requests for "resources.infolinks.com/". Reported by + "Black Rider" on ijbswa-users@.

        +
        • + +
      • +

        Block a bunch of criteo domains. Reported by Black Rider.

        +
        • + +
      • +

        Block "abs.proxistore.com/abe/". Reported by Black Rider.

        +
        • + +
      • +

        Disable filter{banners-by-size} for + ".black-mosquito.org/".

        +
        • + +
      • +

        Disable fast-redirects for "disqus.com/".

      @@ -122,29 +273,38 @@
      • -

        The 'Would you like to donate?' section now also contains a - "Paypal" address.

        +

        FAQ: Explicitly point fingers at ASUS as an example of a + company that has been reported to force malware based on Privoxy + upon its customers.

      • -

        The list of supported operating systems has been updated.

        +

        Correctly document the action type for a bunch of + "multi-value" actions that were incorrectly documented to be + "parameterized". Reported by Gregory Seidman on + ijbswa-users@.

      • -

        The existence of the SF support and feature trackers has been - deemphasized because they have been broken for months. Most of - the time the mailing lists still work.

        +

        Fixed the documented type of the forward-override{} action + which is obviously 'parameterized'.

        • +
      + + +
    • +

      Website improvements:

      +
      • -

        The claim that default.action updates are sometimes released - on their own has been removed. It hasn't happened in years.

        +

        Users who don't trust binaries served by SourceForge can get + them from a mirror. Migrating away from SourceForge is planned + for 2016 (TODO list item #53).

      • -

        Explicitly mention that Tor's port may deviate from the - default when using a bundle. Requested by Andrew on - ijbswa-users@.

        +

        The website is now available as onion service + (http://jvauzb4sb3bwlsnc.onion/).

      • -- 2.39.2
    Privoxy 3.0.23 User ManualPrivoxy 3.0.24 User Manual