nginx.git/src/http, branch release-1.13.0

HTTP/2: reduced difference to HTTP/1.x in reading request body.

2017-04-24T11:17:13+00:00

Particularly, this eliminates difference in behavior for requests without body
and deduplicates code.

Prodded by Piotr Sikora.

HTTP/2: rejecting zero WINDOW_UPDATE with PROTOCOL_ERROR.

2017-04-24T11:16:57+00:00

It's required by RFC 7540.  While there is no real harm from such frames,
that should help to detect broken clients.

Based on a patch by Piotr Sikora.

Gzip static: use an appropriate error on memory allocation failure.

2017-04-20T15:26:38+00:00

Cleaned up r->headers_out.headers allocation error handling.

2017-04-20T15:26:37+00:00

If initialization of a header failed for some reason after ngx_list_push(),
leaving the header as is can result in uninitialized memory access by
the header filter or the log module.  The fix is to clear partially
initialized headers in case of errors.

For the Cache-Control header, the fix is to postpone pushing
r->headers_out.cache_control until its value is completed.

Sub filter: restored ngx_http_set_ctx() at the proper place.

2017-04-18T16:55:23+00:00

Previously, ngx_http_sub_header_filter() could fail with a partially
initialized context, later accessed in ngx_http_sub_body_filter()
if called from the perl content handler.

The issue had appeared in 2c045e5b8291 (1.9.4).

A better fix would be to handle ngx_http_send_header() errors in
the perl module, though this doesn't seem to be easy enough.

SSL: added support for TLSv1.3 in ssl_protocols directive.

2017-04-18T12:12:38+00:00

Support for the TLSv1.3 protocol will be introduced in OpenSSL 1.1.1.

Added support for the "308 Permanent Redirect" (ticket #877).

2017-04-11T01:13:46+00:00

Use ngx_calloc_buf() where appropriate.

2017-04-12T19:21:04+00:00

Upstream: allow recovery from "429 Too Many Requests" response.

2017-03-24T09:48:03+00:00

This change adds "http_429" parameter to "proxy_next_upstream" for
retrying rate-limited requests, and to "proxy_cache_use_stale" for
serving stale cached responses after being rate-limited.

Signed-off-by: Piotr Sikora

Added support for "429 Too Many Requests" response (RFC6585).

2017-03-24T09:48:03+00:00

This change adds reason phrase in status line and pretty response body
when "429" status code is used in "return", "limit_conn_status" and/or
"limit_req_status" directives.

Signed-off-by: Piotr Sikora