Daniel Lenski 92f4d5076e Correctly unescape '+' in URLs and decimal escapes in XML (e.g. ' ' instead of ' ') ...

This patch changes only URL/XML unescaping, not escaping--changing escaping
would remove the reversibility of the tests.

I've been meaning to submit this ever since
http://lists.infradead.org/pipermail/openconnect-devel/2016-October/004042.html
but didn't have a particularly good reason.

However, I recently ran into a (weirdly-customized) version of AnyConnect which
actually sends '+' in one of the authentication forms. So this should improve
AnyConnect compatibility in some corner cases.

2018-01-13 12:56:59 -08:00

..

acct

removed dead assignments

2017-09-07 21:57:31 +02:00

auth

plain: avoid crash on locked accounts

2017-08-23 09:18:03 +02:00

ccan

Reverted recursive make in src/

2016-12-13 15:37:07 +01:00

common

base64-helper: use casts to avoid warnings with various nettle3 versions

2017-12-10 15:06:40 +01:00

http-parser

Updated the included http-parser

2014-03-11 13:19:06 +01:00

occtl

occtl: sessions: print the location when printing the remote IP

2018-01-07 11:47:19 +01:00

ocpasswd

updated auto-generated files

2018-01-07 16:36:06 +01:00

pcl

Reverted recursive make in src/

2016-12-13 15:37:07 +01:00

protobuf/protobuf-c

Reverted recursive make in src/

2016-12-13 15:37:07 +01:00

sup-config

ocserv: allow overriding hostname on the per-user configuration

2016-06-18 11:08:53 +02:00

auth-unix.c

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

auth-unix.h

Only include grouplist functions when they are needed

2015-07-01 20:59:54 +02:00

common-config.h

improved config macro CHECK_TRUE

2016-08-04 08:05:37 +02:00

common.mk

Reverted recursive make in src/

2016-12-13 15:37:07 +01:00

config-kkdcp.c

split KKDCP config line parsing from config.c

2015-05-28 15:53:26 +02:00

config-ports.c

Enhanced configuration option 'restrict-user-to-ports'

2015-12-07 11:15:56 +01:00

config.c

config: fixed incorrect sign check

2018-01-12 13:39:25 +01:00

ctl.proto

occtl: improved presentation of printed statistics

2017-04-14 16:39:00 +03:00

defs.h

ocserv: handle RSA-PSS and ed25519 key types when compiled with gnutls 3.6.0

2017-08-23 12:00:15 +02:00

gettime.h

use CLOCK_REALTIME_COARSE if available.

2013-11-09 09:26:26 +01:00

html.c

Correctly unescape '+' in URLs and decimal escapes in XML (e.g. ' ' instead of ' ')

2018-01-13 12:56:59 -08:00

html.h

Use talloc() for all allocations to reduce the possibility of memory leaks.

2014-05-09 16:13:11 +02:00

http-heads.gperf

Use the X-AnyConnect-Identifier-Platform header to identify mobile clients

2016-09-25 15:44:43 +02:00

icmp-ping.c

replaced select() calls will poll() calls

2016-01-28 13:53:08 +01:00

icmp-ping.h

always assign the first network address as PtP address

2015-02-11 10:27:30 +01:00

ip-lease.c

is_ipv4_ok: corrected access to mask

2017-08-23 11:58:44 +02:00

ip-lease.h

ipv6: introduced ipv6-subnet-prefix config option

2015-10-24 19:26:48 +02:00

ip-util.c

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

ip-util.h

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

ipc.proto

occtl: improved session output

2018-01-07 11:42:09 +01:00

kkdcp_asn1_tab.c

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

kkdcp.asn

kkdcp.asn: use GeneralString for KerberosString to follow RFC1510

2015-02-27 15:01:20 +01:00

log.c

worker: don't log the SID in normal debugging levels

2016-03-05 11:20:54 +01:00

lzs.c

Stop using 1ULL as the base value to be shifted in LZS GET_BITS()

2015-03-01 09:46:43 +01:00

lzs.h

updated copyright information in LZS code

2015-01-16 11:17:52 +01:00

main-auth.c

ocserv: improved session disconnection due to re-use messages

2018-01-07 11:27:02 +01:00

main-ban.c

main: fixed IP unbanning

2016-01-27 14:36:39 +01:00

main-ban.h

correctly print the IP of addresses added to ban list

2015-12-23 19:33:14 +02:00

main-ctl-unix.c

occtl: improved presentation of printed statistics

2017-04-14 16:39:00 +03:00

main-ctl.h

Added occtl command 'show events', as well as the corresponding command in main

2015-12-05 11:23:06 +01:00

main-proc.c

main: store additional statistics globally

2017-04-14 16:39:00 +03:00

main-sec-mod-cmd.c

Avoid gcc warnings due to snprintf truncation

2017-12-10 15:01:20 +01:00

main-user.c

replaced 'const static' definitions with 'static const'

2018-01-12 13:45:05 +01:00

main-worker-cmd.c

handle_worker_commands: fix use of send_msg_to_worker

2017-04-27 08:57:09 +02:00

main.c

forward_udp_to_owner: reduce the error log severity on bind error

2018-01-05 15:23:24 +01:00

main.h

Reset periodically the server statistics kept

2017-04-14 16:39:00 +03:00

Makefile.am

occtl: introduced 'show session' option

2018-01-07 11:15:45 +01:00

ocserv-args.c.in

updated auto-generated files

2018-01-07 16:36:06 +01:00

ocserv-args.def

sample.config: added session-timeout parameter

2017-12-11 08:26:48 +01:00

ocserv-args.h.in

updated auto-generated files

2018-01-07 16:36:06 +01:00

ocserv-fw

ocserv-fw should send all traffic to the device-specific forwarding chain

2017-01-09 15:45:22 -06:00

proc-search.c

update the IP and the proc table hashes when updating the proxy protocol IP

2016-08-01 12:01:42 +02:00

proc-search.h

update the IP and the proc table hashes when updating the proxy protocol IP

2016-08-01 12:01:42 +02:00

route-add.c

Simplified per-user/group configuration handling

2015-11-26 18:29:14 +01:00

route-add.h

A failure to apply iroutes is propagated and login is denied

2015-11-16 17:22:45 +01:00

script-list.h

ocserv: eliminated race condition with up/down scripts

2016-06-05 10:38:34 +02:00

sec-mod-acct.h

radius: send user agent information as Connect-Info

2016-01-16 23:01:10 +01:00

sec-mod-auth.c

sec-mod: always mark an active (open) session

2018-01-07 11:15:45 +01:00

sec-mod-auth.h

sec-mod: perform group checks at auth completion stage

2016-04-01 15:39:02 +02:00

sec-mod-cookies.c

occtl: improved session output

2018-01-07 11:42:09 +01:00

sec-mod-db.c

sec-mod: separated expiration from creation time fields

2017-12-11 08:26:43 +01:00

sec-mod-resume.c

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

sec-mod-resume.h

TLS session resumption database was moved to sec-mod

2015-12-07 19:52:30 +01:00

sec-mod-sup-config.c

Simplified cookie handling

2016-02-23 15:31:17 +01:00

sec-mod-sup-config.h

ocserv: warn when conflicting supplemental config options are specified

2016-04-01 15:32:27 +02:00

sec-mod.c

tlslib: eliminate warnings due to unused functions

2017-12-10 14:41:54 +01:00

sec-mod.h

sec-mod: separated expiration from creation time fields

2017-12-11 08:26:43 +01:00

setproctitle.c

setproctitle: fixed compilation issue in Linux systems without prctl

2016-04-15 14:22:47 +02:00

setproctitle.h

updated license information and authors

2013-11-05 19:38:30 +01:00

str.c

radius: replace experimental Group-Name with Class attribute

2016-04-01 15:33:11 +02:00

str.h

radius: replace experimental Group-Name with Class attribute

2016-04-01 15:33:11 +02:00

subconfig.c

eliminated double null check

2015-12-01 11:46:30 +01:00

tlslib.c

tlslib: eliminate warnings due to unused functions

2017-12-10 14:41:54 +01:00

tlslib.h

tests: added unit test for cstp_recv_nb()

2017-03-24 20:07:47 +01:00

tun.c

Avoid gcc warnings due to snprintf truncation

2017-12-10 15:01:20 +01:00

tun.h

Handle OpenBSD's additional tun header

2015-02-14 14:22:00 +01:00

valid-hostname.c

ocserv: check the hostname value received by the client for validity

2016-06-18 14:21:41 +02:00

vasprintf.c

replaced vasprintf() with correct variant

2014-09-24 11:36:30 +02:00

vasprintf.h

introduced str_append_printf()

2014-06-26 13:46:31 +02:00

version.inc.in

regenerate autogen'ed files when making a distribution.

2013-07-23 21:39:47 +02:00

vpn.h

vpn.h: increased AUTH_SLACK_TIME to 15 secs and documented its use

2017-12-17 17:44:40 +01:00

worker-auth.c

removed dead assignments

2017-09-07 21:57:31 +02:00

worker-bandwidth.c

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

worker-bandwidth.h

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

worker-http-handlers.c

Send "config client" XML field after successful auth

2017-01-04 16:20:29 +01:00

worker-http.c

replaced 'const static' definitions with 'static const'

2018-01-12 13:45:05 +01:00

worker-kkdcp.c

removed dead assignments

2017-09-07 21:57:31 +02:00

worker-misc.c

Reworked MTU discovery

2016-08-04 07:57:37 +02:00

worker-privs.c

seccomp: add getrandom syscall to filter only when it is available

2016-09-21 08:53:08 +02:00

worker-proxyproto.c

worker: added support for proxy protocol v1

2017-03-28 08:08:45 +02:00

worker-resume.c

use a single format for all messages simplifying server

2016-03-06 19:07:07 +01:00

worker-vpn.c

dtls: do increase handshake timeout and decrease retransmission time

2017-11-30 15:53:56 +01:00

worker.h

tests: added unit test for cstp_recv_nb()

2017-03-24 20:07:47 +01:00