Commit graph

181 commits

Author SHA1 Message Date
adam
b6d9bd86bc revbump for icu and libffi 2021-12-08 16:01:42 +00:00
nia
0a4acf7fe3 www: Replace RMD160 checksums with BLAKE2s checksums
All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Not committed (merge conflicts):
www/nghttp2/distinfo

Unfetchable distfiles (almost certainly fetched conditionally...):
./www/nginx-devel/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx-devel/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx-devel/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx-devel/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx-devel/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx-devel/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx-devel/distinfo naxsi-1.3.tar.gz
./www/nginx-devel/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx-devel/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx-devel/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx-devel/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx-devel/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx-devel/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx-devel/distinfo njs-0.5.0.tar.gz
./www/nginx-devel/distinfo set-misc-nginx-module-0.32.tar.gz
./www/nginx/distinfo array-var-nginx-module-0.05.tar.gz
./www/nginx/distinfo echo-nginx-module-0.62.tar.gz
./www/nginx/distinfo encrypted-session-nginx-module-0.08.tar.gz
./www/nginx/distinfo form-input-nginx-module-0.12.tar.gz
./www/nginx/distinfo headers-more-nginx-module-0.33.tar.gz
./www/nginx/distinfo lua-nginx-module-0.10.19.tar.gz
./www/nginx/distinfo naxsi-1.3.tar.gz
./www/nginx/distinfo nginx-dav-ext-module-3.0.0.tar.gz
./www/nginx/distinfo nginx-rtmp-module-1.2.2.tar.gz
./www/nginx/distinfo nginx_http_push_module-1.2.10.tar.gz
./www/nginx/distinfo ngx_cache_purge-2.5.1.tar.gz
./www/nginx/distinfo ngx_devel_kit-0.3.1.tar.gz
./www/nginx/distinfo ngx_http_geoip2_module-3.3.tar.gz
./www/nginx/distinfo njs-0.5.0.tar.gz
./www/nginx/distinfo set-misc-nginx-module-0.32.tar.gz
2021-10-26 11:29:14 +00:00
nia
973412e332 www: Remove SHA1 hashes for distfiles 2021-10-07 15:06:57 +00:00
adam
5e7c36d9d2 revbump for boost-libs 2021-09-29 19:00:02 +00:00
kim
e0b51e5269 lynx: Address CVE-2021-38165
Cherry picked from 2021-08-07 (2.9.0dev.9):
* strip user/password from ssl_host in HTLoadHTTP, incorrectly passed as
  part of the server name indicator (Debian #991971) -TD
2021-08-12 04:20:11 +00:00
adam
da0a125726 revbump for boost-libs 2021-04-21 13:24:06 +00:00
adam
d62c903eea revbump after updating security/nettle 2020-05-22 10:55:42 +00:00
nia
9d4eb5e25c lynx: Default to wide-curses. Add gnutls option.
Note that the license of this is GPLv2 with an exception for OpenSSL.
2020-04-30 09:35:09 +00:00
jperkin
26c1bffc9f *: Recursive revision bump for openssl 1.1.1. 2020-01-18 21:48:19 +00:00
rillig
b12904483c www: align variable assignments
pkglint -Wall -F --only aligned --only indent -r

Manually excluded phraseanet since pkglint got the indentation wrong.
2019-11-04 22:09:50 +00:00
nia
6c8c451a77 Use https for all invisible-island.net HOMEPAGEs. 2019-06-22 11:37:13 +00:00
nia
16067bf2d0 www/lynx: Update to lynx-2.8.9.1
Changes:

2018-07-08 (2.8.9rel.1)
* documentation/metrics updates -TD

2018-06-10 (2.8.9pre.1)
* fix an inconsistency in message for "-listonly" option (Debian #805753) -TD

2018-05-17 (2.8.9dev.19)
* update test-packages to use current ncurses test-packages -TD
* improve portability for sockaddr structures used in HTTP and FTP, for
  IPv6 and SOCKS configurations -TD
* fix several minor warnings reported by Coverity -TD
* build-fix overlooked in 2.8.9dev.3 when INACTIVE_INPUT_STYLE_VH is defined,
  for problem introduced by 2.8.8dev.17 code-cleanup -GV
* trim unnecessary intllib symbols from src/chrtrans/makefile.in -TD
* when cross-compiling, trim LDFLAGS from makefile rule linking makeuctb,
  because it is a build tool, which should generally use BUILD_LDFLAGS
  (patch by Thomas Petazzoni)

2018-05-06 (2.8.9dev.18)
* ignore content-encoding in HTContentToCompressType() if the content-type is
  known, to improve the suggested filename (report by Russell Bell) -TD
* add support for using client certificate with OpenSSL configuration (patch
  by Elliot Thomas).
* fix a few more memory leaks -TD
* put Lynx.leaks file in home directory like Lynx.trace (report by GV) -TD
* fix a memory leak in HTFTP.c -GV
* modify HTDoConnect(), adding a check for keyboard interrupt with 'z' in the
  select-loop -TD
* modify legacy feature from Lynx 2.7.2 which checks the hostname of a URI
  to guess whether to use HTTP, FTP, etc., depending upon the prefix of the
  URIs hostname.  This is now an optional feature, GUESS_SCHEME, which defaults
  to FALSE (Debian #893907) -TD

2018-03-21 (2.8.9dev.17)
* modify samples/oldlynx.bat to check if Lynx recognizes the -lss option -TD
* modify samples/*lynx.bat to check for environment variables that Lynx would
  test for temp-directory, and only if those are absent will the scripts
  attempt to create a temp-directory -TD
* modify samples/*lynx.bat to set PATH for executing utility programs -TD
* remove unused critSec_DNS -TD
* use EnterCriticalSection in ws_netread rather than InitializeCriticalSection
  since critSec_READ was initialized in LYMain.c (report by GV) -TD
* use freeaddrinfo() in one case where free() was used (report by GV) -TD
* implement "+" item type for gopher protocol (report by James Tomasino) -TD
* add checks in options-menu in case no color-styles have been defined -TD
* add Visual Studio project files for 2010, 2012 -TD
* improve checks for strings which should not be empty -TD
* check for empty personal-mail-address (report by TG) -TD
* modify samples/lynx-demo.cfg to use SOURCE_CACHE:memory -TD
* modify samples/*lynx.bat to use existing TEMP-directory if possible -TD
* modify windows installer to select directory containing SSL DLLs and copy
  them into lynx's application directory -TD
* add oldlynx.bat sample script to windows installer -TD
* use default lynx.lss color scheme with samples/lynx.bat -TD
* modify windows installers to use static libraries for pdcurses and slang,
  because the dll for the latter is much larger than the rest of lynx.
  Even with this change, lynx.exe is 50% larger when using slang than with
  pdcurses -TD
* rename test-package for ".rpm" to "lynx-dev" for consistency with ".deb" -TD
* improve samples/lynx.bat by using location of script rather than current
  directory -loto1992@inbox.ru ("Smuggler")
* permanently enable MISC_EXP feature -TD
* remove several obsolete ifdefs: DGUX, DGUX_OLD, HP_TERMINAL,
  REVERSE_CLEAR_SCREEN_PROBLEM, SHORTENED_RBIND, SLANG_MBCS_HACK, SNAKE -TD
* improve logic in HTCopy used to limit reads based on content-length to
  take into account server headers which extend past the first block read
  (report/test-case by Dick Wesseling) -TD
* permanently enable EXP_HTTP_HEADERS feature -TD
* modify color-style hashing to check for collisions (reported by TG, Russell
  Bell) -TD
* add PREFERRED_CONTENT_TYPE defaulting to text/plain and options-menu to
  replace an assumption in HTMIMEConvert that everything is text/html.
  Since most servers provide a valid Content-Type for HTML, and are more likely
  to omit it for files lacking a known suffix, defaulting to text/plain is a
  better choice -TD
* remove dead-code for OMIT_SCN_KEEPING -TD
* remove dead/unreachable pretty-source code in HTML.c, noticed because
  it complicates hashing -TD
* improve hashing for anchors and styles by using a more suitable hash-table
  size -TD
* add a note in lynx.cfg telling how to remove a default key-mapping -TD
* modify "=" command to make it possible to disable margins for the URL string,
  by first disabling wrapping using "|" -TD
* several fixes for Windows version -TH
  + fix an abnormal terminate when pressing 'd'(download) on no action button.
  + work around incompatibility in move() between POSIX and Windows.
    ref: https://www.securecoding.cert.org/confluence/display/c/FIO10-C.+Take+care+when+using+the+rename%28%29+function
  + fix limit-check for SJIS which prevented showing a show long title in the
    title bar on Windows environment.
  + fix problem with PDCurses when wrapping lines.
    ref: lynx-dev discussions "Subject: Wrapping line behavior"
  + fix resizing terminal problem with Windows + PDCurses.
    This problem occurs only with some combinations of source and destination
    screen size.
    For example: 80x25 -> 90x20
  + including some code clean up
* improve consistency in help-files discussing line-edit keymaps (prompted by
  Debian #888391) -TD
* additional fixes to work with LibreSSL on OpenBSD 6.2 -TD
* build-fixes for OpenSSL 1.1.0 versus 1.0.0 (patch by Quentin Minster).
* modify configure script to make a quirk of NetBSD's make-program less
  noticeable -TD
* modify configure script to work around pkgsrc's misconfiguration of shared
  libraries -TD
* modify po/makefile.inn to ensure the temporary files have distinct names
  to avoid problem with "make -j8" (Debian #890811) -TD
* update makefile/batch-scripts to allow building with newer Visual Studio
  versions, e.g., 2010, 2012, so that a 64-bit executable can be built -TD
* repair link in lynx_help_main.html to HTML 3.2 documentation
  (Savannah #47803) -TD
* update eo.po, fr.po from
    http://translationproject.org/latest/lynx
* improved several configure macros:
  CF_BUILD_CC, CF_CC_ENV_FLAGS, CF_CURSES_FUNCS, CF_CURSES_LIBS,
  CF_NCURSES_CONFIG -D
* updated ftp-site url -TD
* update config.guess (2018-01-26), config.sub (2018-01-15)

2017-07-10 (2.8.9dev.16)
* modify configure script to warn if NLS cannot be configured, and disable
  the feature rather than leaving it partly configured and failing during
  the build -TD
* modify configure script to allow pre-set $MSGFMT and $XGETTEXT variables to
  to used to build the NLS configuration using system's native NLS support -TD
* convert po/zh_TW.po to UTF-8 to work with Solaris10, which lacks big5 -TD
* build-fix for OSX Panther, which has PRId64 but not SCNd64 (patch by Martijn
  Dekker).
* modify po-makefile to use msgmerge to align with lynx.pot, and also use sed
  to update some obsolete homepage URLs in translations -TD
* add a note in the comments for INCLUDE in lynx.cfg regarding the default
  directory searches LYOpenCFG(), added in 2.8.4dev.20 (Debian #818047) -TD
* add a check to ensure that HTML_put_string() will not append a chunk onto
  itself (report by Ned Williamson) -TD
* update da.po, et.po, tr.po from
    http://translationproject.org/latest/lynx

2017-07-04 (2.8.9dev.15)
* add note in lynx.cfg about default values (Debian #408448) -TD
* amended Backes' change to the COLLAPSE_BR_TAGS feature for compatibility -TD
  + use ENABLE_LYNXRC to determine whether it is written to the .lynxrc file.
  + add command-line option, etc., for controlling whether blank lines are
    trimmed, e.g., trailing lines as well as the special case for collapsing
    br-tags.  Leading blank lines at the top of the document are untouched.
  + modify limit for trimmed lines to retain as little as 1 line; previously
    the trimming would go no smaller than 2 lines.
* add command-line option and options-menu item for COLLAPSE_BR_TAGS (patch
  by Peter Backes).
* fix strict gcc7 warnings on OSX, aside from those due to incorrect system
  headers -TD
* adjust definition of alloca() in HTUtils.h to quiet bogus compiler warning
  with NetBSD 7 -TD
* add configure check for preprocessor -C option, overlooked in c99 -TD
* correct logic in HTCopy() when re-reading a page (Debian #863008) -TD
* fix lintian warnings in ".deb" test-package -TD
* build-fix for PGI compilers, e.g., symbol conflicts -TD
* update eo.po from
    http://translationproject.org/latest/lynx

2017-05-10 (2.8.9dev.14)
* amend fix for Debian #841155, adding check for complete multibyte strings to
  decide when the cell-limit has been met (Debian #862148) -TD
* minor improvements to configure script to reduce warnings in config.log -TD
* update config.sub (2017-04-02)
* compiler-warning fixes for c99 on OSX -TD

2017-04-29 (2.8.9dev.13)
* amend fix for Debian #841155, adding check for special case where the
  expected number of cells is zero (report by Larry Hynes) -TD

2017-04-28 (2.8.9dev.12)
* correct logic in cell2char(), which gave up too early in determining the
  number of cells needed for a multibyte string in the editable text-fields
  (Debian #841155) -TD
* improve manual page discussion of environment variables, prompted by
  comments in Debian #791452, which overlooked the fact that details of proxy
  behavior are found in the user guide -TD
* cleanup some of the user's guide formatting, e.g., for quote-characters -TD
* consistently use "_" in command-line options table and manual page, to work
  with program logic that treats "-" as "_", but not the reverse (report by
  Larry Hynes) -TD
* improved several configure macros:  CF_ADD_CFLAGS, CF_CC_ENV_FLAGS,
  CF_GNU_SOURCE, CF_LARGEFILE, CF_MATH_LIB, CF_PROG_LINT, CF_SRAND,
  CF_XOPEN_SOURCE -TD
* modify Windows makefile to allow SSL_LIBS and SSL_DEFS to be overridden,
  reflecting naming-incompatibility in recent OpenSSL development -TD
* modify ncurses-specific code to allow its TERMINAL struct to be opaque -TD
* refine special case of server Content-Type from 2.8.7dev.11 changes to
  decompress files offered for download when the server has gzip'd them
  (report by TH) -TD
* amend comparision from 2.8.8dev.10 changes to handle slang specially
  (report/testcase by TH) -TD
* minor cleanup of UCDomap.c -TD
* build-fix for color-style with leak-checking -TD
* amend merge/fixes from
	http://en.sourceforge.jp/project/lynx-win32-pata
  as well as problem introduced by 2.8.8dev.6 cleanup -TH
* update ca.po, from
    http://translationproject.org/latest/lynx
* tidy whitespace in lynx.cfg (report by David Niklas) -TD
* fix two more typos in the list of ENABLE_LYNXRC in lynx.cfg -TD
* remove a repeated item for SEND_USERAGENT from lynx.cfg (Larry Hynes)
* accept userinfo in a URL, subject to override by -auth option or -pauth
  options.  According to RFC-3986, this is deprecated, but testing shows other
  clients support it -TD
* fix several minor warnings reported by Coverity -TD
* remove redundant asserts which follow a check that leads to outofmem(),
  added in 2.8.8dev.4 to appease clang 2.6, since clang 3.x understands
  no-return function declarations -TD
* when converting host+params to idna, temporarily separate the params to
  avoid a warning from idna_to_ascii_8z() -TD
* improve warning messages from 2.8.9dev.11 fixes when stripping user/password,
  dropping an unnecessary message and fixing a case where all-punctuation
  user name was not logged (report by Axel Beckert) -TD
* update config.guess (2017-03-05), config.sub (2017-02-07)

2016-11-15 (2.8.9dev.11)
* amend fix for stripping user/password to ensure that the stripped value is
  used when connecting to the host (prompted by discussion of CVE-2016-9179
  at https://lists.debian.org/debian-lts/2016/11/threads.html#00072) -TD

2016-11-08 (2.8.9dev.10)
* improved fix for OpenSSL 1.1 (Taketo Kabe).
* improve warning message when stripping user/password from URL; report on
  http://seclists.org/oss-sec/2016/q4/322 treated as a Lynx parsing error the
  punctuation such as "?" which is permitted by RFC-1738 in a user or password
  field.  RFC-3986 subsequently modified this.  The improved message points out
  the possible confusion by users when these fields contain punctuation -TD
* build-fix for OpenSSL 1.1 (Kamil Dudka)
* begin work to parse gopher extension "link to URL" -TD
* remove an obsolete comment in the manual page about -dump versus -force_html
  (report by Peter Schmitt) -TD
* modify samples/oldlynx to provide an empty ".lss" file as a better default
  than providing an empty "-lss" option -TD
* amend change made in 2.8.8dev.17 to permit multiple COLOR_STYLE items to
  restore the ability to cancel the color-style by providing an explicitly
  empty configuration item (in lynx.cfg, -lss or $LYNX_LSS).  In lynx.cfg, it
  is possible to follow the empty COLOR_STYLE with other data, but the -lss
  option overrides everything, and if that is not found, $LYNX_LSS overrides
  lynx.cfg -TD
* correct ifdef so that if the "news" parsing is disabled at compile time,
  HTTP.c interprets https:// links correctly when a https_proxy is set up
  (patch by Al Walker).
* add a limit-check in case colspan is given as zero for non-nested-table case
  (report by Sami Liedes) -TD
* update nl.po, sl.po from
    http://translationproject.org/latest/lynx

2016-04-26 (2.8.9dev.9)
* add workaround for servers such as https://www.xing.com which fail to close
  the connection when they finish sending compressed data.  This relies on
  the content-length (report by Klaus-Peter Wegge) -TD
* restore fix to filter out left-to-right marks which was broken in refactoring
  in 2.8.9dev.2, and also filter out right-to-left marks (Debian #808949) -TD
* fix build for current gnutls configuration which dropped the
  gnutls_protocol_set_priority function (reported by Axel Beckert, Andreas
  Metzler) -TD
* modify CF_LD_RPATH_OPT configure macro, changing FreeBSD case to use
  -Wl,-rpath rather than -rpath option.  According to FreeBSD #178732, either
  works since FreeBSD 4.x; however scons does not accept anything except the
  -Wl,-rpath form -TD
* add null-pointer checks for ssl_ctx in HTTP.c in case of error from calls
  on SSL_CTX_new (report by Yuan Jochen Kang) -TD
* update config.guess (2016-01-01), config.sub (2016-01-01)
* update da.po, fi.po, tr.po from
    http://translationproject.org/latest/lynx

2015-12-18 (2.8.9dev.8)
* fix regression in SSL support (report by Axel Beckert) -TD
* update et.po, fr.po, vi.po, zh_CN.po from
    http://translationproject.org/latest/lynx

2015-12-18 (2.8.9dev.7)
* make the HTTP version configurable, defaulting to "1.0" (HTTP/1.0) as
  HTTP_PROTOCOL, and make it changeable in the options menu -TD
* switch HTTP version to 1.1, adding an explicit "close" to work around
  the pitfall of persistent connections.  This is to work around a selective
  reading of RFC 2068 by duckduckgo.com - see
    http://lists.nongnu.org/archive/html/lynx-dev/2015-12/index.html
  -Axel Beckert
* fix a potential null dereference in tidy_tls.c reported by Coverity -TD
* extend advanced mode by showing field names in forms in the status line
  (suggested by TG) -TD
* fix some typos found by lintian -Axel Beckert
* correct buffer size in pretty_html() function of LYKeymap.c -TG
* add support for some HTML5 elements -Kihara Hideto
  Using this change, you can jump to <section id="speakers">.
  (The addition in src{0,1}_HTMLDTD.txt is copied from DIV.)
  <section>, <article>, <main>, <aside>, <header>, <footer>, <nav>, <figure>
* improve configure check for extended curses functions, needed for compiling
  with ncursesw on OSX, in particular when configuring with ncurses6 (report
  by Tom Wyant) -TD
* set SSL_MODE_AUTO_RETRY in OpenSSL configuration, completing work needed for
  Debian #707059 -TD
* correct description used for "K" vs "k" key binding in manpage -TD
* adopt some of the patches from Debian lynx package:
  + add Delete key usage to manpage (patch by Denis Briand, Debian #74358)
  + add $(LDFLAGS) when building makeuctb (patch by Atsuhito Kohda).
  + add NO_BUILDSTAMP symbol to appease
    https://wiki.debian.org/ReproducibleBuilds/TimestampsFromCPPMacros
  + add -n option to gzip when making gzip'd helpfiles (patch by Andreas
    Metzler).
  + add support for client certificates (patch by Simon Kainz, Debian #797901).
* use POSIX locale when sorting entries in cfg_defs.h (patch by Reiner Hermann,
  Debian #792770).
* move homepage for Lynx from
    http://lynx.isc.org
  to
    http://lynx.invisible-island.net
  because ISC has ended support -TD
* change "GNU Public License" to "GNU General Public License" for consistency
  (report by Axel Beckert) -TD
* free a use-after-free in scan_cookie_sublist (Redhat #1120925) -TG
* updates for configure macros from ncurses and xterm -TD
* fix for gnutls logic to support rehandshake on negotiation for optional
  client certificate, e.g., for https://contributors.debian.org (patch by
  Simon Kainz, Debian #797059).
* update ca.po, sv.po, et.po from
    http://translationproject.org/latest/lynx
* use gnutls_set_default_priority() to simplify algorithm priorities in the
  gnutls configuration as well as track occassional changes in that library
  (patch by Andreas Metzler, Debian #789189, Debian #784430).
* correct logic in LYsetRcValue() from 2.8.8dev.13, which would free the wrong
  pointer if the input had leading blanks (patch by Ruda Moura).
* fix CF_CHECK_SIZEOF autoconf macro to work when its working variables have
  been preset to an empty value (report by Andrew Arensburger) -TD
* update config.guess (2015-10-21), config.sub (2015-08-20)

2015-05-06 (2.8.9dev.6)
* add a note about OCSP to url-support documentation (Debian #745835) -TD
* change defaults for SSL prompts when a problem is detected to "no" (Debian
  #783477) -TD
* if an SSL error message is too long for the screen-width, trim it with an
  ellipsis so that the "(y)" part of the prompt for continuing will be visible
  (Debian #783476) -TD
* update test-packages to use ncurses6 test-packages -TD
* modify configure script to check for ncurses ".pc" files first before looking
  for the "ncurses*-config" scripts -TD
* modify configure script to accept a release-number for the ncurses/ncursesw
  values of the "--with-screen" option, e.g., "--with-screen=ncursesw6" -TD
* cosmetic fixes for autoconf macros to avoid vi-workaround -TD
* update da.po, et.po, fr.po, nl.po, vi.po from
    http://translationproject.org/latest/lynx
* regenerated lynx.pot, sent to translation project -TD
* update config.guess (2015-03-04), config.sub (2015-03-08)

2015-04-12 (2.8.9dev.5)
* add codes U+200A, U+200B to def7_uni.tbl (prompted by report by Sven
  Hartrumpf, as well as referring to
  https://www.cs.tut.fi/~jkorpela/chars/spaces.html) -TD
* restore large buffer-size from follow_link_number() which was altered in
  2.8.8dev.10 changes to use LYgetBString() (Debian #699068) -TD, -TG
* loosen the check in IsOurFile() to permit hard-linked files
  (Debian #429606) -TD
* update ca.po, cs.po, et.po, fi.po, fr.po, id.po, nl.po, pt_BR.po, ru.po,
  sl.po, tr.po, vi.po from
    http://translationproject.org/latest/lynx

2015-01-25 (2.8.9dev.4)
* modify check after gnutls_certificate_verify_peers2() to use
  gnutls_certificate_verification_status_print() when available, to give
  potentially more details on certficate revocation (patch by Andreas Metzler,
  Debian #745835, Debian #752610)

2015-01-05 (2.8.9dev.3)
* correct shortcut for "Send To" link used in Inno Setup script, broken in
  2.8.8dev.15 -TD
* amend change made in 2.8.8dev.10 to LYLocal.c get_filename(), ensuring that
  the bstring parameter can be (re)allocated within that function's call to
  LYgetBString() (report by Raoul Megelas) -TG
* build-fixes for djgpp 2.04 and gcc 4.8.4 using Watt-32 -GV

2014-12-21 (2.8.9dev.2)
* correct an inconsistent check for reload using isLYNXCGI() in the
  options-screen -TD
* add script after using msginit to create en.po, to work around renaming in
  Cygwin environment -TD
* improve overlay of field contents in form for "-dump" option; the change
  in 2.8.8dev.3 did not take into account UTF-8 values (Debian #770011) -TD
* correct a bug in the map_string_to_keysym() function introduced in
  2.8.8dev.17:  as used via the remap() function, this returns the curses
  code for a special key rather than Lynx's internal code (Debian #769601) -TD
* add checks when translating from UTF-8 to Unicode, to ensure that only the
  shortest encoding is accepted.  Other/longer encodings are mapped to the UCS
  replacement character as in xterm (Debian #763268) -TD
* modify LYExpandHostForURL() to call HTGetAddrInfo(), allowing DNS lookups
  for IPv6 to be interrupted, e.g., by typing ^G.  This was a path overlooked
  in 2.8.8dev.13 (reports by Chad Kline, etc.) -TD
* drop libgnutls-extra when using --with-gnutls-compat option -TD
* drop libgcrypt dependency when building with gnutls, using gnutls_rnd()
  rather than gcry_randomize() (adapted from patch by Andreas Metzler,
  Debian #753699) -TD
* fix a reference-after-free in scan_cookie_sublist(), probably fixing RedHat
  #1120925 -Mike Gorse
* update eo.po, id.po from
    http://translationproject.org/latest/lynx
* improve workaround for too-long pathnames in LYPrint.c SetupFilename() -TD
* fix a few inconsistencies between #if / #ifdef, including one for sleep()
  which broke cross-compiles for MinGW -TD
* updated/improved configure script macros (TD):
  + CF_ACVERSION_CHECK:  work around another gratuitous incompatibility
    introduced in 2.69 (reported by Ross Burton, openembedded.org)
  + CF_ADD_CFLAGS:  workaround for ash-shell
  + CF_ADD_LIBS:  workaround in CF_X_TOOLKIT uses pkgconfig, whose files
    generally are using incomplete dependencies - in turn introducing lots of
    duplication.  filter out the duplicates.
  + CF_CHECK_CFLAGS:  workaround for ash-shell
  + CF_CURSES_FUNCS:  improve workaround for weak-linkage, seems to fix tests
    with NetBSD 6.1
  + CF_INTEL_COMPILER:  cleanup the -no-gcc option which was leftover from
    testing - prcs does not build with this option.
  + CF_MAKEFLAGS:  workaround for GNU make 4.0 incompatibility with previous
    releases.
  + CF_SUBDIR_PATH:  add /usr/pkg and /opt/local to help configuring with
    pkgsrc and macports -TD
  + CF_XOPEN_SOURCE:  Minix3.2 ifdef's the POSIX.1-2001 functions inside
    _NETBSD_SOURCE, even though it was released 2012-02-29 - appease it.  At
    the same time, turn on the verbose flag to show that most platforms need
    platform-specific define's to get POSIX (sic).  Also, add case for UnixWare
    (report/discussion with Mark Ryan).
  + CF_X_ATHENA:  add --with-Xaw3dxft option
  + CF_X_TOOLKIT:  add workaround for breakage in XQuartz upgrades
* add check to ensure that "submit" command from 2.8.8dev.10 is performed
  in a form (report by Karen Lewellen) -TD
* update config.guess (2014-03-23), config.sub (2014-07-28)
2018-11-14 16:09:03 +00:00
tez
71f3507a30 lynx: update to 2.8.8.2nb9
Patch for CVE-2017-1000211 from:
280a61b300
2018-06-15 22:24:38 +00:00
jperkin
0119efa4e4 lynx: Pull in upstream ncurses fixes, and fix SunOS. 2018-05-17 10:16:25 +00:00
wiz
ee1f10ce4c lynx: fix build with openssl-1.1.
Bump PKGREVISION to be on the safe side.
2018-02-16 07:17:09 +00:00
wiz
df52f15bb9 lynx: update HOMEPAGE and MASTER_SITES 2018-02-11 23:00:08 +00:00
wiz
9ddb7f9e9c Comment out dead MASTER_SITES/HOMEPAGEs. 2017-09-03 08:36:49 +00:00
agc
30b55df38e Convert all occurrences (353 by my count) of
MASTER_SITES= 	site1 \
			site2

style continuation lines to be simple repeated

	MASTER_SITES+= site1
	MASTER_SITES+= site2

lines. As previewed on tech-pkg. With thanks to rillig for fixing pkglint
accordingly.
2017-01-19 18:52:01 +00:00
roy
caf8b32518 Use curses framework. 2017-01-04 14:49:38 +00:00
sevan
94144e27fd Fix broken patch committed previously which resulted in lynx crashing.
Bump rev again.

Apologies to anyone caught out by this mistake.
Heads up by alnsn@
2016-12-22 17:30:51 +00:00
sevan
ea6498d6c0 Patch for POODLE & CVE-2016-9179.
Bump rev.
2016-12-21 11:25:25 +00:00
shattered
784d3c822b Unbreak build on systems without msginit in base (= Solaris) 2016-07-22 18:51:41 +00:00
jperkin
17661ff9a5 Bump PKGREVISION for security/openssl ABI bump. 2016-03-05 11:27:40 +00:00
agc
b9b754e081 Add SHA512 digests for distfiles for www category
Problems found locating distfiles:
	Package haskell-cgi: missing distfile haskell-cgi-20001206.tar.gz
	Package nginx: missing distfile array-var-nginx-module-0.04.tar.gz
	Package nginx: missing distfile encrypted-session-nginx-module-0.04.tar.gz
	Package nginx: missing distfile headers-more-nginx-module-0.261.tar.gz
	Package nginx: missing distfile nginx_http_push_module-0.692.tar.gz
	Package nginx: missing distfile set-misc-nginx-module-0.29.tar.gz
	Package nginx-devel: missing distfile echo-nginx-module-0.58.tar.gz
	Package nginx-devel: missing distfile form-input-nginx-module-0.11.tar.gz
	Package nginx-devel: missing distfile lua-nginx-module-0.9.16.tar.gz
	Package nginx-devel: missing distfile nginx_http_push_module-0.692.tar.gz
	Package nginx-devel: missing distfile set-misc-nginx-module-0.29.tar.gz
	Package php-owncloud: missing distfile owncloud-8.2.0.tar.bz2

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.
2015-11-04 02:46:46 +00:00
tnn
3e1c48dfa7 replace optional socks5 dependencies with net/dante 2015-09-30 08:25:37 +00:00
wiz
c7383780db Bump all packages that depend on curses.bui* or terminfo.bui* since they
might incur ncurses dependencies on some platforms, and ncurses just bumped
its shlib.
Some packages were bumped twice now, sorry for that.
2015-08-18 07:31:00 +00:00
wiz
0eb141f110 Bump PKGREVISION for ncurses shlib bump. 2015-08-17 17:11:19 +00:00
wiz
cda18437be Remove pkgviews: don't set PKG_INSTALLATION_TYPES in Makefiles. 2014-10-09 14:05:50 +00:00
wiz
c95e2264fa Depend on fixed ncursesw package and remove unneeded patch. 2014-09-16 09:52:05 +00:00
wiz
0ddca3523e Correct and fix build with ncursesw.
From Leonard Schmidt in PR 49200.
2014-09-12 21:29:22 +00:00
wiz
1473e292ef Update to 2.8.8rel2:
2014-03-09 (2.8.8rel.2)
* correct errata in test-files which cause broken links in break-out directory
  in lynx.isc.org server -TD
* amend change from 2.8.8pre.2, to ensure that MinGW libraries already
  declaring 'sleep()' will build -TD
* drop unused save/compress rules from makefile.in, because fixing umask for
  these is pointless -TD
* modify makefile.in to establish sane umask value in the "install-doc" rule
  (report by Rajeev V Pillai) -TD
* build-fix for NetBSD, whose curses library provides use_default_colors(),
  but the package turns off the keymap feature (patch by Thomas Klausner).
2014-03-12 10:13:15 +00:00
wiz
d867a2b438 Remove unused patch after update. 2014-02-20 15:34:21 +00:00
wiz
dfd0ca5f37 Update to 2.8.8rel1:
2014-02-14 (2.8.8rel.1)
2014-02-14 (2.8.8pre.5)
* change quoting for fixup to help_files.sed in 2.8.8dev.17 to work around
  bug in cygwin's make/sed programs -TD
* change quality value for application/xhtml+xml mime type added for Debian
  #184482, to ensure that it is offered as one of Lynx's internal types on
  an "Accept:" line sent to the server (Debian #725178) -TD
* trim unexpected query-parameters from file: URIs when checking for their
  presentation and compression types.  Not all browsers do this, etc. -TD
* modify forms-submit to trim query-parameters from the action URI if it
  happens to be a file-URL.  IE and some other browsers do this. The RFCs
  do not mention this since forms are an HTTP feature (Debian #738121) -TD
* reviewed command-line options which were not provided in lynx.cfg; added
  others which could be useful for dumps (i.e., force_html, hiddenlinks,
  listonly, list_inline, localhost, short_url, with_backspaces) -TD:
* add dont_wrap_pre to lynx.cfg (request by GV) -TD
* use idn_free() rather than ordinary free (patch by GV)
* build-fix when alt-bindings are disabled (patch by GV)
* correct sense of --disable-alt-bindings option in configure script (prompted
  by report by GV) -TD

2014-02-04 (2.8.8pre.4)
* modify the LOCALE_CHARSET feature to provide a default value for the
  ASSUMED_CHARSET feature aka "display-charset" (Debian #737416) -TD
* fix two bugs in print-to-file from 2.8.8dev.10 changes -TD
  + suggested filename suffix for text/html was ".html" rather than ".txt"
  + using ^U to clear the filename to print to did not cancel the prompt
  (report by Klaus-Peter Wegge)
* disable EXP_JAPANESEUTF8_SUPPORT if the system has no iconv support -TD
* modify makefiles to perform the src/chrtrans rules from the top-level rather
  than via the src-level, solving the issue of "makefile races" -TD
* reviewed minor fixes from OpenBSD CVS for these issues:
  - fix makefile races [espie]
  - read/write result checking fixes to avoid unsigned comparisons vs -1 [krw]
  However, the former is not an improvement; kept only the latter -TD

2014-01-11 (2.8.8pre.3)
* apply analogous changes to tidytls.c interface -TD
* apply openssl patch from openSUSE package for Lynx to modify the SSL options
  to omit the SSLv2 and compression features (report by BJP) -TD
* add check for alternate package "libssl" also used with Fedora20 -TD
* fix a check in configure-script for openssl subdirectory in includes. It
  happened to work in most cases due to a spurious blank in the pkg-config
  file; this was removed recently, e.g., for Fedora20 -TD
* fill-in some dangling links in test-files -TD
* build-fix for --disable-prettysrc (reported by Don Hsi-Yun Yang aka
  "omoikane") -TD
* review/improve html helpfiles -TD
* ensure that $(sysconfdir) exists in makefile as dependency of install-help
  rule -TD
* update config.guess (2014-01-01), config.sub (2014-01-01)

2013-12-17 (2.8.8pre.2)
* change makefile.msc and lynx-slang.iss to use dll for slang -TD
* change URL for HELPFILE in lynx.cfg, etc., to omit version-specifics -TD
* update example of options menu shown in user-guide -TD
* restore ^Z maxscreen-toggle for Windows, omitted in 2.8.8dev.17 cleanup -TD
* typographical fixes for manpage (Bjarni I. Gislason, Debian #732236).
* allow fallback sleep() function to be used for MinGW -GV
* remove special case in configure.in which added "-lcompat" to $LIBS
  for OpenBSD, MirBSD and EkkoBSD (Christian Weisgerber, Thorsten Glaser).
* build-fix for --disable-forms-options -TD
* omit request for admin-access in NullSoft installer, since lynx could be
  installed in user's directory -TD
* change Windows default for LYNX_LSS_FILE to not use a directory-path -TD

2013-11-28 (2.8.8pre.1)
2013-11-28 (2.8.8dev.17)
* revise/update counts in README.metrics, using a script replacing a manual
  procedure -TD
* amend check for magic header bytes from 2.8.8dev.3 for "deflate" to limit it
  to the 3-bit block header described in RFC-1951 -TD
* install the sample-files in the dpkg test-script -TD
* add configure option --with-cfg-path and environment variables LYNX_CFG_PATH
  to provide search-list capability for the ".cfg" and ".lss" files -TD
* modify configuration of COLOR_STYLE value in lynx.cfg, allowing multiple
  filenames to be specified and providing those as choices in the O'ptions
  menu (Debian #404893) -TD
* updates for lynx_help_main.html -TD
* update URLs in about_lynx.html -TD
* add internal URL "LYNXEDITMAP:", which is (like "LYNXKEYMAP:") generated,
  making that the primary page for field-editing help -TD
* improve DOSPATH-related logic in HomeEnv(), making this work properly with
  Windows Vista and 7.  The feature is needed to read Lynx's bookmarks file
  from the user's "Personal" shell-folder (report by Manuel Nunez) -TD
* modify samples/*.bat to work when running in a directory whose pathname
  contains spaces -TD
* reduce required privileges for installing in lynx.iss -TD
* improve sed expression appended to help_files.sed to fix a case for the
  edit-helpfiles which left a ".gz.gz" suffix for compressed filename URLs,
  overlooked since 2.8.1pre.3 -TD
* modify logic in lkcstring_to_lkc() to allow named keys, e.g., from curses,
  to be used consistently in a KEYMAP directive -TD
* add version-info to LYIcon.rc -TD
* add symbols in Keysym_Strings[] and table in setup_vtXXX_keymap() for
  function keys 2-12, to improve keymap-configurability -TD
* change extra-key #define's in LYStrings.h to enum -TD
* cleanup pre-2.7 debris from LYStrings.c and LYStrings.h -TD
* modify tables for key-bindings and edit-bindings to allow them to be reloaded
  to their initial values -TD
* add check in get_connection() for ftp-connections to ensure that a password
  from a URL is non-empty -TD
* add samples/oldlynx.bat to demonstrate how to use non-color-style -TD
* add NSIS script, to allow building Windows installer via cross-compiling -TD
* fixes to configure script and makefiles to work with empty $prefix, e.g.,
  as used in MSYS -TD
* improve configure check for sleep() for cross-compiling to MinGW -TD
* modify configure check for inet_addr() for cross-compiling to MinGW -TD
* add configure check for Win32 flavor of PDCurses when cross-compiling to
  MinGW using the "--with-screen=pdcurses" option -TD
* improve color-style simulation of old color scheme by coloring input fields
  with color #5 -TD
* correct search logic to match links which are wrapped on the right margin.
  Previous fixes to highlight arbitrarily long links overlooked this case
  (Debian #546264) -TD
* modify the INFO page, normally bound to "=", to show decoded strings for
  URLs, e.g., which use %xy hexadecimal encoding.  The decoded strings are
  shown on the line following the encoded URLs if the strings are different.
  Also if display-charset is UTF-8, modify -dump "References" URLs to show
  the corresponding decoded strings for consistency with the text which is
  already in UTF-8.  Other URLs such as that shown in the status area are
  shown in encoded form per previous discussion which recommending doing this
  to address phishing attempts (Debian #398274) -TD
* simplify file-URLs shown in reference list of -dump by trimming unnecessary
  "localhost", e.g.,
    file://localhost/XXX
  becomes
    file:///XXX
  (Debian #334787) -TD
* extend the "Bad HTML" warning feature to -dump option when the -stderr
  option is also set (Debian #398304) -TD
* add -list_inline option, which modifies -dump output to put links inline with
  the text rather than in a list at the end of the dump (Debian #584080) -TD
* add clarification in manpage regarding -force_html option versus -dump or
  -crawl (Debian #254603, Debian #295273) -TD
* improve manpage descriptions of -reload, -get_data and -post_data (Debian
  #350853) -TD
* modify manpage synopsis to make it clearer that Lynx accepts more than one
  path and/or URL on the command-line. The paragraph explaining this was
  added in 2.8.6dev.5 (Debian #350853) -TD
* update COPYHEADER, clarifying license issues -TD
* minor change to Content-Length logic from 2.8.8dev.13 to work with Amazon's
  cookies (Debian #720541) -TD
* improve warning message for GNUTLS_CERT_SIGNER_NOT_FOUND (Debian #695653) -TD
* ignore non-fatal return codes from gnutls_handshake introduced by SNI change
  in 2.8.8dev.15 (Debian #724812, patch by Hans Wurst).
* updates for configure macros -TD
  + CF_ACVERSION_CHECK, fix from byacc for "newer" autoconf.
  + CF_ADD_LIB_AFTER, fix from xterm for problem with -Wl,xxx options
  + CF_CURSES_LIBS, modify to allow external script to set $cf_term_lib and/or
    $cf_curs_lib
  + CF_INTEL_COMPILER, $host_os needs AC_CANONICAL_HOST
  + CF_MIXEDCASE_FILENAMES, add msys / msysdll to known host/platform types
  + CF_RPATH_HACK, use sort and uniq rather than sort -u, to work with HPUX
    11.11, etc.
  + CF_TRY_PKG_CONFIG, set variables for consistent usage of this macro
  + CF_XOPEN_SOURCE, add msys / msysdll to known host/platform types
  + CF_X_ATHENA, trim extra X libraries after updating lists, to work with ld
    --as-needed option which in effect uses only the first mention of the
    library.  If that does not follow everything that depends on the library,
    ld will silently fail to resolve symbols.
* update config.guess (2013-06-10), config.sub (2013-09-05)

2013-07-29 (2.8.8dev.16)
* build-fix for setmode() definition on Cygwin -TD
* modify HTUtils.h to work around header conflict with Cygwin w32api and
  openssl 1.0.1e (prompted by report/patch by Supriyo Biswas) -TD
* protect redefined errno values for Windows port from redefinition warnings
  when using MinGW build, since the WSAxxx values are what the configuration
  actually uses -TD
* modify <address> tag to treat it like <p> when used within a list -TD
* update fi.po from
    http://translationproject.org/latest/lynx
* add on/off toggles to options menu for the color-style and default-colors
  features, to help deal with packages which enable default colors without
  adjusting the color-style settings to avoid having yellow text on a white
  background (report by Stephen Isard) -TD
* add -default-colors command-line option to allow toggling the state of the
  DEFAULT_COLORS setting from lynx.cfg -TD
* improve discussion of -dump and -force_html in manpage (Ubuntu #1112568) -TD
* cleanup quoting and use of ASCII "-" versus hyphen in manpage -TD
* add checks for zero-length strings in a few places to prevent infinite loop
  when the focus moves to a text-field which is past the right margin due to
  improper placement for the nested-tables configuration (report by Rajeev V
  Pillai) -TD
* update doctype for html documentation to 4.01 strict -TD
* correct handling of backslash in TrimCommand() function introduced in
  2.8.6dev.4, used to process the commands for "test=" in mime-types -TD
* correct 2.8.3dev.13 check for permissible place to split UTF-8 encoded text,
  reported by Coverity -TD
* make DONT_TRACK_INTERNAL_LINKS logic configurable via lynx.cfg as
  TRACK_INTERNAL_LINKS; the configure script now sets the default value -TD
* fix most issues found by clang 3.2 analyze -TD
* fix most issues found by Coverity scan -TD

2012-11-18 (2.8.8dev.15)
* corrected position of highlighting from search/whereis function when using
  multibyte characters (Debian #673385) -TD
* modify default case for HTLoadGopher() to use the file's suffix to obtain
  a MIME mapping rather than always storing unknown types to disk (suggested by
  Dario Niederman) -TD
* modify ^X-e handling to not limit the result to the form field's length
  (report by Keith Bowes) -TD
* modify the Inno Setup files to show lynx's version numbers.  Development
  and prerelease versions are indicated in the numeric-only versions by
  prefixing a "10" or "20" -TD
* ask for filesize when downloading via ftp, to use this in the read-progress
  ETA -TD
* fix special case when -dont_wrap_pre option is used, to restore space between
  words which was lost when inserting a soft newline used to splice together
  segments of a long line (Ubuntu #806749) -TD
* provide more readable ETA message as an option (prompted by patch by Joerg
  Hahn) -TD
* add GNUTLS call to enable SNI (Server Name Indication) extension (Ubuntu
  #732177) -TD
* correct typo for -bibhost option in manpage (Redhat #854574) -TD
* revise nsl-fork logic for passing addrinfo and hostent data back to eliminate
  fixed limit on the number of records to return -TD
* correct problem with loop logic in fill_addrinfo() exposed by multiple
  addresses from
    http://fbcdn-sphotos-d-a.akamaihd.net
  (report/analysis by TG) -TD
* updates for configure script macros (TD):
  + add 3rd parameter to AC_DEFINE's to allow autoheader to run
  + remove unused macros
* update nl.po from
    http://translationproject.org/latest/lynx
* improve checking of certificates in the gnutls_certificate_verify_peers2()
  by handling special case where self-signed certificates should be reported
  (patch by Jamie Strandboge).
* update config.guess (2012-09-25), config.sub (2012-08-18)

2012-08-22 (2.8.8dev.14)
* reset anchor's actual-length calculation at the end of pumpData() to handle
  scenario where this is used for internal data movement, i.e., for
  decompressing files (report by Owen Leibman, Debian #681214) -TD
* drop two files overlooked in previous commit (TD):
  lynx.rsp and WWW/Library/Implementation/HTFWriter.c

2012-08-15 (2.8.8dev.13)
* make nsl-fork work for the DNS lookup using getaddrinfo, i.e., for IPv6
  configurations (report by FLWM) -TD
* add U+0218, U+0219, U+021a, and U+021b to 0x53, 0x73, 0x54, and 0x74,
  respectively, for Romanian s/t with cedilla in def7_uni.tbl (Ralph Babel)
* modify handling of "set" in -cmd_script option to try both cfg-file and
  rc-file settings (prompted by discussion with Andrew Watts) -TD
* update configure script to add --datarootdir option, which changes the
  default for man-page from /usr/lib to /usr/share -TD
* modify configure check for sizeof(time_t), sizeof(off_t) to help recover if
  it is run in a deficient environment such as busybox -TD
* limit downloaded files by Content-Length if any, to match behavior of IE,
  Firefox and some other browsers; this is not addressed in RFC 2616 (Debian
  #681214) -TD
  For more information, see "Content-Length in the Real World" by Eric Law:
  http://blogs.msdn.com/b/ieinternals/archive/2011/03/09/browsers-accommodate-incorrect-http-content-length-and-sites-depressingly-depend-on-it.aspx
* fix an unbounded loop in restrictions_fun() which could cause a core dump
  (Debian #616107) -TD
* add LDFLAGS to top-level makefile.in, for consistency with other recursive
  options (suggested by Naomasa Maruyama) -TD
* modify makefile.in and src/makefile.in to pass make-flags, e.g., "-n" for
  POSIX make -TD
* updated configure macros (TD):
  + add check for clang warning options
  + check for tinfo library, which may be present
  + omit -Wpointer-arith check for pre-3.0 gcc
  + add check for 'make' programs ${MAKEFLAGS} versus ${MFLAGS}, for recursive
    operation.
* updated list for "$(TABLES)" in src/makefile.in so that parallel builds work
  properly (patch by Diego Elio Petteno)
* remove extra "$(LDFLAGS)" from src/makefile.in when linking lynx (patch by
  Josef Sontgen)
* correct formatting of large file-sizes in directory listing (Debian
  #666213) -TD
* improve checking of certificates in the gnutls_certificate_verify_peers2()
  (report by Martin Georgiev) -TD
* update de.po eo.po sv.po vi.po from
    http://translationproject.org/latest/lynx
* use PDCurses "wide" variation in makefile.msc -TD
* modified quoting for parameter values passed to blat mailer to ensure that
  it handles embedded blanks (report by pfourier) -TD
* fix regression introduced by changes for Debian #603648 -TD
* modify makew32.bat and makefile.bcb to use GnuWin32 packages to simplify
  builds with Borland 5.51 C++ compiler (prompted by discussion with
  pfourier) -TD
* add configure check for windres needed for mingw build if cross-compiling -TD

2012-02-22 (2.8.8dev.12)
* treat charsets ISO-8859-8-E and ISO-8859-8-I as aliases of ISO-8859-8
  (Owen Leibman)
* amend the dev.10 change to HTLoadDocument(), which broke caching of forms,
  to limit it to just the case where the user has pressed ^R, etc (report by
  TG) -TD

2012-02-19 (2.8.8dev.11)
* correct help-message for -html5_charset option -Kihara Hideto
* correct a typo in strtol change from dev.10 which caused hexadecimal numeric
  entities to be misrendered -TG
* update eo.po, et.po and tr.po from
    http://translationproject.org/latest/lynx
* correct dll name for bzip2 in lynx.iss package script -TD

2012-02-12 (2.8.8dev.10)
* updated po/lynx.pot; there are a few new messages -TD
* add "submit" and "reset" commands (Debian #603645) -TD
* add "pwd" command, to show current working directory in the statusline -TD
* modify check in HText_endForm() when a form contains only a single input
  field, to allow a return in any text-like field other than textarea to cause
  the form to be submitted (Debian #603648) -TD
* add bzlib to win32 makefile.msc -TD
* define WIN32_LEAN_AND_MEAN in makefile.msc to accommodate naming conflict
  in recent Win32 SDKs, which otherwise include winsock.h in windows.h -TD
* fixes for the dev.9 Win32 feature to toggle between normal/fullscreen,
  by checking the actual screensize after maximizing the display -TD
* use ASCII apostrophe for 7-bit approximation to U+02bd as well -TD
* use ASCII apostrophe 0x27 for 7-bit approximation to Unicode apostrophe
  U+02bc (suggested by Ralph Babel)
* update LYLeaks.c / LYLeaks.h to include the bstring allocation, copy and free
  functions -TD
* several fixes for the -find-leaks option, e.g., include LYLeaks.h in a few
  modules, modify the StrAllocVsprintf function to update the bookkeeping,
  etc -TD
* move call to LYCanWriteFile into LYValidateOutput, to make prompts for
  download, print and upload more alike -TD
* correct an old bug in send_file_to_file(), used when printing a page to a
  file, which prevented its check for appending to an existing file -TD
* modify LYValidateFilename to use LYTildeExpand -TD
* modify LYConvertToURL to use LYTildeExpand for Unix, and further modify
  LYTildeExpand to lookup given user's home directory, thereby making commands
  such as "g ~root/tmp" work as expected -TD
* replaced most LYgetStr calls with LYgetBString, except for LYMail.c and
  LYNews.c since those do use LYgetStr's limits as it was designed.  Other
  calls generally did not need those limits -TD
* modify finish_ExtEditForm to eliminate wrapping when an edited line is longer
  than MAX_LINE.  The user is still offered the choice of wrapping to the
  displayed size of a TEXTAREA, but if declined, the TEXTAREA's content will
  not be wrapped -TD
* modify LYgetstr, making it call revised function LYgetBString which handles
  bstring's, and allows editing fields which can grow without fixed buffer
  limits.  In particular, forms all use the same calls, which means that
  their result is no longer limited by MAX_LINE -TD
* extend ^X-e editing of textarea's to include single-line fields -TD
* modify comparison for splitting lines to allow for long preformatted lines,
  e.g., using &nbsp;'s to not wrap when the line-wrap mode is disabled -TD
* modify cfg2html.pl to handle options which contain a digit, e.g.,
  HTML5_CHARSETS whose default value was not marked properly -TD
* modify HTLoadDocument() to not retain a cached document if user is explicitly
  doing a refresh.  This fixes the case for a #fragment url, which was
  otherwise treated as the same as the address without the #fragment -TD
* clarify version of GPL used in README (request by Paul Menzel) -TD
* modify HTLoad() to discard charset information before reloading a document,
  in case the server changes the content-type information between loads
  (report by Stanislav Brabec) -TD
* use tidy to indent html documentation -TD
* provide a way to substitute parameters in URLs for jumpfiles (adapted from
  patch by Mark Skilbeck -TD
* ensure that button/input tags have a value for display, in case the tag is
  improperly terminated (report by Aki Helin) -TD
* work around glibc bug in sscanf in SGML_character() using strtol() (report by
  Aki Helin) -TD
* add check for charset attribute on meta element -Kihara Hideto
* eliminate ON/OFF macros, using TRUE/FALSE both to work around breakage from
  zlib 1.2.5.1 changes as well as because they were unnecessary (GenToo
  #383113) -Nikos Chantziaras, TD
* updated several configure script macros (TD):
  CF_ANSI_CC_CHECK, CF_CURSES_LIBS, CF_LD_RPATH_OPT, CF_NETLIBS,
  CF_XOPEN_SOURCE, CF_X_ATHENA_LIBS

2011-06-12 (2.8.8dev.9)
* modfy cfg2html to add ".url" directive for referencing RFC's etc -TD
* document blat/blatj usage in lynx.cfg -TD
* add/use WriteStreamTitle(), to provide doctype for cookie-jar page, used to
  help validate the page -TD
* improve readability of cookie-jar page by showing the unescaped cookie
  values, other minor formatting changes -TD
* modify cookie domain-matching to accommodate RFC 6265, which states that a
  leading dot on a domain attribute should be discarded (report by Sebastien
  Hinderer) -TD
* integrate most of the changes from patch in 2.8.6rel.4 package at
	http://en.sourceforge.jp/project/lynx-win32-pata -TH, TD
  + provide toggle between normal/fullscreen
  + ifdef'd changes for FEP.
  + correct a message translation in ja.po
  + modify Xsystem.c to not use MinGW's system() call.
  + add three items to lynx.cfg
	conv_jisx0201kana
	message_language
	wait_viewer_termination
  + replace ifdef's for CONV_JISX0201KANA_JISX0208KANA with configuration
    variable conv_jisx0201kana
  + modify makefile.bcb and lynx.rsp to use openssl and intl libraries.
  + add feature ifdef'd with USE_PROGRAM_DIR which adds fallback definitions
    for pathnames to use the directory of lynx.exe
  + add check for unsafe filenames in DOS/Windows, e.g., those that correspond
    to a device.
* update command-line syntax for the blat mailer, to work with blat 2.6.2 -TD
* change default in makelynx.bat to assume blat rather than blatj, because
  the latter does not provide a way to authenticate user/password on a mail
  server -TD
* change #define's for addrlist-page and alt-bindings to reflect their
  non-experimental status -TD
* change default for --enable-addrlist-page configure option to enabled -TD
* modify blat/blatj configuration so that support for both is compiled-in
  for DOSPATH configurations.  Add "-altblat" option to select blat vs blatj.
  Define USE_ALT_BLAT_MAILER to specify which is the default (prompted by
  report by LarryL) -TD
* correct an interaction between LYCloseOutput() and LYRemoveTemp() as used in
  send_file_to_mail(), to allow a temporary file to be closed and used by
  external program before removing it -TD
* modify lkcstring_to_lkc() to accept hex/octal values, allowing those in the
  KEYMAP configuration as suggested by the commented lines in lynx.cfg (report
  by Richie Wood) -TD
* build-fix for DEC C 5.x with _DECC_V4_SOURCE defined, i.e., missing
  declaration of "off_t" (report/analysis by Rod Reiger) -TD
* build-fixes for Alpha VMS V8.3 with C V7.1-015, based on lynx 2.8.7
  development snapshot (report/analysis by Scott Harrod) -TD
* improve scripts/tbl2html.pl, to handle translation of octal escapes in the
  approximation comments -TD
* amend implementation of "readonly" attribute from 2.8.7dev.10 to distinguish
  it from "disabled" (report by David Paschal) -TD
* amend change to cookie prefix matching from Debian #460108.  The discussion
  overlooked this definition from RFC 2109:
   Path   Defaults to the path of the request URL that generated the
          Set-Cookie response, up to, but not including, the
          right-most /.
  In that context, lynx was correct to extract the default "path" attribute
  of
    http://jukebox/cgi-bin/disorder
  as
    /cgi-bin
  rather than
    /cgi-bin/disorder
  as asserted in the report.  However, lynx warned unnecessarily (according to
  the bug report) about the given path attribute.  Deciding whether to suppress
  this warning is under control of the user via the lynx.cfg setting
  COOKIE_QUERY_INVALID_DOMAINS since 2.8.2dev.16 (report by Owen Leibman) -TD
* add eo.po (Esperanto) from
    http://translationproject.org/latest/lynx
* modify format of ADVANCED_COOKIE_CONFIRMATION message in nl.po per guideline
  to allow localized single-letter responses to prompt (report by Jurgen
  Gaeremy) -TD
* add configure check for <bsd/random.h>, used in Debian package -TD
* modify src/tidy_tls.c to use gnutls_priority_set_direct() in preference to
  various access functions, to eliminate deprecation warnings (report by
  Andreas Metzler) -TD
* updated several configure script macros (TD):
  CF_CURSES_CPPFLAGS, CF_CURSES_FUNCS, CF_CURSES_HEADER, CF_CURSES_LIBS,
  CF_CURSES_TERM_H, CF_DISABLE_RPATH_HACK, CF_PDCURSES_X11, CF_PKG_CONFIG,
  CF_RPATH_HACK, CF_STRUCT_TERMIOS, CF_XOPEN_CURSES, CF_XOPEN_SOURCE,
  CF_X_ATHENA_LIBS
* update config.guess (2011-01-01), config.sub (2011-04-01)

2011-01-10 (2.8.8dev.8)
* correct sense of menu-name parameter in add_item_to_list() from dev.7
  changes (report by Larry Hart) -TD
* remove duplicate copy of CF_TRY_PKG_CONFIG added to aclocal.m4 in 2.8.8dev.4,
  which caused autoconf-2.13 to emit weird error messages about undefined
  symbols (report by TG) -TD

2010-12-11 (2.8.8dev.7)
* add PERSONAL_MAIL_NAME to options menu and .lynxrc (Debian #603647) -TD
* remind user how to cancel message (Debian #292787) -TD
* add HTML5_CHARSETS feature, which allows the user to choose whether to
  interpret pages without an explicit charset according to the HTML5
  "compatibility" feature (Debian #604466, Debian #514897) -TD
* add EXTERNAL_MENU feature to lynx.cfg, which allows the user to customize the
  menu-entry shown, e.g., to suppress the display of the URL
  (Debian #603646) -TD
* cleanup URLs in lynx documentation -DK
* add check in getfile() when handling a "mailto:" url, to prevent it when the
  user has requested a dump (Debian #563308) -TD
* improve configure check for IDNA library, which may depend upon intllib,
  e.g., building with mingw on cygwin -DK
* modify autoconf macros which look for X libraries, e.g., for PDCurses, to
  accommodate ongoing changes in xorg package scripts -TD
* reorganize autoconf macro CF_WITH_CURSES_DIR, to make it usable for both
  curses and ncurses -TD
* several changes to autoconf macros to lessen use of legacy shell feature
  "${name-value}" in favor of "${name:-value}", since the former is broken in
  recent versions of bash -TD
* apply overlooked patch from pre-2.8.5, makes RMDIR_PATH configurable
  (report/patch by Frank Heckenbach).
* correct one of the places where link-number is formatted, for form input
  anchors.  This was broken in dev.6 by the -unique_urls changes (report by
  DK) -TD
* undo a cleanup change to link-types from dev.6 which broke some uses of
  input-anchors (report by FLWM) -TD
* minor formatting improvements to sources using cindent 2.0-20101107 -TD
* restore \r to \n conversion in HTML_put_character(), broken in gcc warning
  cleanup (report by FLWM) -TD
* fix a double-free in make_argv() (report by FLWM) -TD
* add a memset in RestoreSession(), fixes uninitialized memory reference for
  the VLINK section -PBM
* update config.guess (2010-09-24), config.sub (2010-09-11)

2010-10-04 (2.8.8dev.6)
* amend change for Debian #514897 to exclude XML documents (Debian #592883) -TD
* use HTParsePort() in a few places, e.g., HTFinger.c, to allow for IPv6
  addresses with colons (Debian #587330) -TD
* modify option -dump so it is parsed in the first pass, using that to suppress
  requirement for lss file if lynx is used only to dump output -TD
* add option -unique-urls (Debian #586762) -TD
* fix most gcc type-conversion warnings -TD
* add configure check for ctags/etags programs, needed for some BSD ports -TD
* add configure --with-textdomain option to allow overriding the "lynx"
  NLS textdomain, to help ensure that Lynx's build-script does not conflict
  with alternative packages -TD
* use AC_ARG_PROGRAM in configure script, to support --program-suffix, etc.,
  to help with packaging -TD
* add Debian build script, for testing (adapted from lynx-cur package) -TD
* add RPM build script, for testing -TD

2010-08-25 (2.8.8dev.5)
* modify convert_to_idna() to check for malformed urls (Debian #594300 reports
  this as CVE-2010-2810) -TD
* correct typo in po/makefile.inn from removal of mkdirs.sh in dev.4 (Debian
  #592078) -TD
* correct a sign-extension error in UpdateBoundary(), used for MIME boundary
  computation, broken in dev.4 compiler-warning fixes -TD

2010-06-21 (2.8.8dev.4)
* check for SSL error when reading response from "GET".  This incidentally
  exposes a longstanding bug in GNUTLS:
    https://savannah.gnu.org/support/index.php?106987
  (google the message "A TLS packet with unexpected length was received")
  which prevents connection to
    https://www.mynortonaccount.com/amsweb/default.do
  (report by Ignac Vucko) -TD
* fix ifdef/define's in LYMain.c to show GNUTLS version in user-agent when
  built with tidy_tls.c -TD
* improve format of X509_NAME_oneline() in tidy_tls.c, making it compatible
  with the OpenSSL function so that no post-processing is needed -TD
* correct typo in configure --enable-gnutls-compat option, which sometimes made
  it enabled as a side-effect of setting --with-gnutls -TD
* add configure option --enable-wais, for test-compiles with freeWAIS -TD
* fixes to build with VMS -Christoph J Gartmann
  + created [.src]multinet_ucx.opt with a single line
    multinet_root:[multinet.library]ucx$ipc/LIBRARY
  + modified build.com to have an additional option "Multinet with
    UCX emulation"
  + modified libmake.com for the same reason
  + modified [.www.library.implementation]www_tcp.h for the same reason
  + provide definition of IS_CJK_TTY for HTWAIS.c by adding include of
    LYStrings.h
* fix typo in users's guide -PBM
* drop mkdirs.sh and MKINSTALLDIRS symbol from makefiles, using "mkdir -p" -TD
* limit parsed URIs with new config parameter MAX_URI_SIZE, default 8192
  (RedHat #605286, forwarded by Vincent Danen). For arbitrarily long URIs,
  alloca() could run out of stack space -TD
* several changes to configure script, from ongoing work on xterm, etc -TD
  + workaround for broken ".pc" file for X Toolkit, which omits the ICE
    library.
  + modify CF_NCURSES_CONFIG to use CF_CURSES_HEADER to pick out the particular
    flavor of ncurses.h, e.g., <ncursesw/curses.h>
  + add parameter to CF_CURSES_HEADER to allow looking for specific
    subdirectory ncurses/ncursesw/etc + restructured CF_X_ATHENA to use
    pkg-config, if available.
  + use CF_ADD_LIB/CF_ADD_LIBS
  + CF_GNUTLS eliminates duplicate libraries when configuring with pkg-config
  + modified several macros to quote params of ifelse()
  + CF_AR_FLAGS allows $ARFLAGS to override the choice of ar-flags, in
    particular check if a given choice is part of the current $ARFLAGS
  + workaround CF_XOPEN_CURSES for (temporary) problem with ncurses headers,
    which did not account for the fact that _XOPEN_SOURCE_EXTENDED may be
    defined in a system header.
* remove redundant updates for CFLAGS and LIBS in configure script which are
  now done in CF_FIND_LINKAGE macro -TD
* fix a problem with configure script which broke "--with-gnutls=/usr" (report
  by Atsuhito Kohda) -TD
* resolve warnings from "clang --analyze", tested with Fedora 12 and clang
  2.6-0.5.pre1.fc12, 2.7-1.fc12 -TD
* further improvements to print_wwwfile_to_fd() -TD
  + corrected length used for radio/checkboxes.
  + fill in wrapped fields.

2010-04-25 (2.8.8dev.3)
* modify print_wwwfile_to_fd() to add field values to the printed form (Debian
  #574940) -TD
* add check for magic (header bytes) before trying to decompress, since zlib
  does not provide this check (Redhat #503921) -TD
* add workaround in CF_SSL configure macro for broken openssl pkg-config script
  on Redhat, CentOS -TD
* add configure option --disable-rpath-hack -TD
* allow IPv6 addresses without "http://" prefix (Redhat #425879, patch by Kamil
  Dudka)
* build-fixes for OpenSolaris aka Solaris 11 -TD
* add/use CF_RPATH_HACK, for constructing rpath references to libraries in
  nonstandard locations -TD
* improve configure macros CF_CURSES_TERM_H and CF_FIND_LINKAGE -TD
* add synopsis entries for -get_data and -post_data options to lynx.man
  (report by Dallas E. Legan II) -TD
* fix a possible conflict between CF_HEADER_PATH and CF_LIBRARY_PATH by setting
  their respective target variables, not appending -TD
* improve configure macro CF_XOPEN_SOURCE by removing rather than undefining
  preexisting symbols as they are added to the definitions -TD
* add configure check for -lnetwork, from tin -TD
* when renaming/copying a bookmark file, e.g., to delete a bookmark, modify
  its permissions for compatibility with IsOurFile() (Redhat #486070) -TD
* fix most gcc writable-strings warnings -TD
* update config.guess (2009-12-30), config.sub (2009-12-31)

2009-11-25 (2.8.8dev.2)
* modify trimming of URI in LYSetCookie() to eliminate trimming of final leaf
  (Debian #460108) -TD
* document the various xxx_PATH settings in lynx.cfg -TD
* modify cfg2html.pl to improve formatting of cattoc.html -TD
* split-up top-level makefile install-html rule to allow generating the
  htmlized cfg without doing an install -TD
* suppress positioning for editor when using it to edit files via dired -TD
* modify samples/lynx-demo.cfg to suppress external file-utilities, since the
  intent is to make the installer work standalone, but allow extension -TD
* add traces for builtin dired operations -TD
* modify built-in "touch" for dired to use binary mode when opening file -TD
* remove check from 2.8.5dev.11 which prevents user from moving a directory in
  dired unless the external program "mv" is provided -TD
* regularize use of isEmpty(), non_empty() -BL
* match built-in "positionable" editor names more liberally -BL
* promote some experimental options to normal, tidy up related EXP_xxx vs
  USE_xxx symbols -TD
  EXP_ASCII_CTYPES is now USE_ASCII_CTYPES
  EXP_JUSTIFY_ELTS is now USE_JUSTIFY_ELTS
  EXP_CHARSET_CHOICE is now USE_CHARSET_CHOICE
  The scrollbar, progressbar, sessions and session-cache options are now
  enabled by default.
* modify scanning in HTRules.c to only trim comments where '#' is either at
  the beginning of a line, or follows whitespace (patch by Kihara Hideto).
* correct a place where LYStrExtent2 was used where byte-count is needed
  (patch by Bake Timmons).
* modify LYExecv() in LYLocal.c to allow win32 applications to use this
  function -TD
* modify ok_stat() in LYLocal.c to retry with "." appended when the path syntax
  indicates that it is probably a directory name -TD
* fix an old typo in configure macro CF_CHECK_FUNCDECL -TD
* change library dependency for gnutls from crypt to gcrypt, originally in
  2.8.5dev.15 (Debian #555579) -TD
* update de.po from
    http://translationproject.org/latest/lynx
* fix some tidy- and linklint-warnings in help-files -TD
* amend change from 2.8.7dev.14 to not use clrscr() function in stop_curses()
  if using PDCurses, since clrscr() is not in the win32 api -TD
* modify configure script to check if linkage for bzlib and zlib succeeded,
  before defining symbol which makes the compiler uses these libraries -TD
* update lynx_help_main.html to point to "release/lynx2-8-7" documentation -TD

2009-08-28 (2.8.8dev.1)
* add <sys/types.h> include in socklen_t configure check (from OpenBSD CVS)
* eliminate UCPutUtf8ToBuffer() - redundant -TD
* use memset's to simplify some initialization in HTML.c, extending a change
  made in 2.8.7dev.10 (prompted by issue in OpenBSD) -TD
* add optional support for IDNA using GNU libidn (Debian #352596) -TD
* ignore LEFT-TO-RIGHT-MARK (U+200E) in HTML files (Debian #408835) -TD
* correct check for return-value from gnutls_certificate_verify_peers2(), which
  in conjunction with unclean internals of gnutls caused caused some sites to
  be treated as if they were version-1 X.509 CAs (Debian #231609,
  Ubuntu 293708) -TD
* revise dired-mode's modify_tagged() function, correcting and extending the
  source-paths to validate against the target path.  Before, lynx's current
  working directory was used to validate against target path, i.e., when moving
  all tagged files to a new location.  Lynx's check to ensure that
  source/target paths are distinct prevented users from moving tagged files to
  the current directory (report by Jasper) -TD
* change compiled-in default for SYSLOG_REQUESTED_URLS to false (prompted by
  Debian #537907) -TD
* adjust ifdef in change_sug_filename() so that paths containing square
  brackets are trimmed on VMS only (report by Gaute Strokkenes) -TD
* amend change to ifdef in LYMain.c (from 2.8.7dev.14), since it prevents build
  on NetBSD, whose libintl.h does not include locale.h (report by Thomas
  Klausner) -TD
* modify configure macro CF_GCC_ATTRIBUTES to make it more self-contained -TD
* improve configure check for _XOPEN_SOURCE for HPUX 11 to ensure mbstate_t is
  declared -TD
* update config.guess (2009-08-19), config.sub (2009-08-19)
2014-02-20 10:07:35 +00:00
tron
c64e9eb269 Recursive PKGREVISION bump for OpenSSL API version bump. 2014-02-12 23:18:26 +00:00
riastradh
2e1de0be23 Fix www/lynx cross-build by setting BUILD_CC. 2013-05-11 16:24:59 +00:00
tron
4f346966e4 Fix build problem probably caused by OpenSSL update. 2013-02-08 00:10:47 +00:00
jperkin
becd113253 PKGREVISION bumps for the security/openssl 1.0.1d update. 2013-02-06 23:20:50 +00:00
asau
5eae6a18a3 Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days. 2012-10-28 06:30:00 +00:00
wiz
f98e8b0585 Add inet6 to default suggested options. It's 2012. 2012-06-12 15:45:54 +00:00
wiz
2bd71bac65 Update to 2.8.7rel.2 as 2.8.7nb4.
Same distfile name, different contents.

Changes:
2010-06-21 (2.8.7rel.2)
* add limit-check for too-long URIs in href's (RedHat #605286) -TD
* fix a few places still referring to "2-8-6" -TD
2011-11-30 14:02:59 +00:00
obache
1d9df3258a recursive bump from gettext-lib shlib bump. 2011-04-22 13:41:54 +00:00
obache
d68eeace27 Fixes Bus error with --restrictions option. PR#43340.
(sent and confirmed by upstream).
2010-05-26 01:32:33 +00:00
drochner
d50f8c2330 don't insist in USE_NCURSES in the ncursesw case -- NetBSD's should
be good enough
(this file needs more cleanup, the color stuff looks outdated)
2010-02-25 18:50:21 +00:00
wiz
579796a3e5 Recursive PKGREVISION bump for jpeg update to 8. 2010-01-17 12:02:03 +00:00
wiz
8f1edebbe5 Update to 2.8.7:
New features (some are compile-time options):

    * add session save/restore feature
	  o bind ^X to toggle view of page showing session information
	  o add binding for ^U to previous-document (outside of
	  line-editing).
	  o documented command-line options and configuration data
	  for this feature.
	  o document -child_relaxed option in Lynx users's guide.
    * add -passive-ftp option.
    * add -child_relaxed option.
    * add "read_timeout" to lynx.cfg, and -read_timeout option to
    command-line
    * add -show_cfg option.
    * add LYNX_HELPFILE environment variable to allow override of
    location of the help-file
    * add NO_PAUSE setting to lynx.cfg, .lynxrc and Options menu
    * implement a LONG_LIST equivalent for ftp, configurable as
    FTP_FORMAT
    * add XWINDOWS / NON_XWINDOWS environment-variable field to
    DOWNLOAD, etc., in lynx.cfg to specify whether a downloader
    (printer, etc) is enabled when the X display variable is set
    * configure script improvements
	  o add --with-mime-libdir option to set MIME_LIBDIR in
	  userdefs.h file
	  o add --with-destdir configure option to set a default
	  value for the DESTDIR variable in makefiles, and modified
	  makefiles to ensure that setting DESTDIR in the top-level
	  makefile propagates to lower levels
	  o add --enable-local-docs option to link doc-directory
	  from help-page
	  o add --enable-ascii-ctypes option to enable EXP_ASCII_CTYPES

Other enhancements:

    * improve SSL support:
	  o improve X.509 certificate validation This is tested
	  for OpenSSL, ifdef'd to not break gnutls. Changes:
		+ peer certificate is cached, no need to call
		SSL_get_peer_certificate() twice
		+ support foo.domain:port and [ip.add.re.ss] and
		[ip.add.re.ss]:port and [i:p:v:6:ad:dr:es:s] and
		[i:p:v:6:ad:dr:es:s]:port
		+ add support for checking X.509v3 SubjectAltName
		extensions (of type DNS - tested - and IP - untested)
		when the X.509 commonName check fails.
		+ when displaying a list of failed CNs, change
		format from foo:bar:baz to
		CN{foo}:CN{bar}:CN{baz}:SAN{DNS=foo}:SAN{IP=1.2.3.4}
		so that we know where what comes from (in "Your
		recent statusline messages")
		+ if the peer certificate can *NOT* be verified,
		output a message to the log as well
		+ fix a possible use of an uninitialised value
		ssl_all_cns
		+ output certificate issuer to the logs as well
		(so that you can, before entering your online
		banking PIN, see if the certificate has been issued
		not only _to_ your bank but also _from_ a place
		you trust, in case /etc/ssl/certs/ contains a lot
		of Root CA certs)
	  o add support for the X.509 extension subjectAltName
	  using GNUTLS.
	  o log SSL/TLS (HTTPS connection) X.509 certificate issuer
	  information into the "recent statusline messages"
	  (accessible via the backspace key)
	  o add TNS SNI support for the OpenSSL configuration
	  o modify CF_SSL configure macro to check for -ldl needed
	  for recent OpenSSL versions
	  o modify CF_SSL configure macro to build with MSYS for
	  MinGW configuration
	  o extend configure macros CF_SSL and CF_GNUTLS to check
	  for pkg-config, using that for the default if the
	  corresponding openssl or gnutls packages are installed.
	  o add configure --with-nss-compat option, for building
	  with NSS library's OpenSSL-compatible interface
	  o add SSL_CERT_FILE to lynx.cfg
	  o rewrite strcasecomp_asterisk() to support wildcards as
	  in RFC 2818
	  o add --enable-gnutls-compat configure option and associated
	  files to configure with GNU TLS without its gnutls-openssl
	  library, whose newer versions are available only under
	  a restrictive license.
	  o fix src/tidy_tls.c X509_get_issuer_name to actually
	  take the issuer DN of the present certificate and not
	  hope that it is the same as taking the subject DN of the
	  "next" certificate which may or may not exist.
    * improve HTML interpretation:
	  o update Lynx's tables of HTML attributes to cover (except
	  for events) the keywords from HTML 4.01
	  o use RFC-822 encoding for filenames passed via file-upload
	  forms.
	  o provide navigation to script-buttons, to make them more
	  visible, showing their name
	  o add "Bad HTML messages" to Options menu, letting the
	  user disable the warning message, write the detailed
	  messages to the LYNXMESSAGES: status buffer.
	  o remove "Bad HTML" warning for buttons outside a form,
	  since those can be inline, according to the HTML 4 DTD
	  o correct check for default type of HTML BUTTON, which
	  is "submit". The code treated this as "button".
	  o implement "readonly" attribute for TEXTAREA and TEXT
	  fields
	  o accommodate (in)compatibility "feature" in HTML5 draft
	  which replaces ISO-8859-1 with Windows-1252, as indicated
	  here.
	  o add support for HTML5 rel=author in link.
	  o modify SGML_write() to check for UCS-2 BOMs, to provide
	  support for UCS-2 pages.
	  o modify SGML_write() to check for UTF-8 BOM, using that
	  as a hint to set the default document charset to UTF-8.
	  o parse xml processing-instruction to turn on UTF-8
	  decoding, as well as disable upper/lower case transforming
	  in source view.
	  o parse doctype for xhtml, to tell when empty tags such
	  as "<textarea />" can be discarded
	  o translate named entities, etc., for "content" field of
	  refresh-URL.
	  o add switch -xhtml-parsing and lynx.cfg XHTML_PARSING
	  setting to control whether the extensions for XHTML 1.0
	  are used.
	  o modify Lynx's DTD information to allow it to display
	  form-related tags that are inline, even without being in
	  a form as indicated in

		    http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd


	    for %inline.forms and %misc.inline.
    * improvements to character sets and display:
	  o improve drawing of menus for multibyte characters by
	  changing the way the number of fill-characters is computed
	  in LYpaddstr
	  o fix some uses of gettext in options menu and info page
	  where a translated string might contain angle-brackets
	  or ampersand
	  o modify popup for externals added in 2.8.4dev.20 to
	  number the entries if keypad mode is set to one of the
	  numbered forms
	  o ie multibyte editing of text-fields.
    * improvements to color-style:
	  o bug-fixes only
    * improve interaction with user:
	  o remove check for -dump option from HTHandleAuthInfo(),
	  allowing Lynx to -dump or -source NNTP urls
	  o change the phase during which "-help" option is processed,
	  to allow it to reflect the configured values of the options
	  in the help-message
	  o check if there is piped-in data when starting without
	  "-" or "-stdin" options, warn about the ignored input
	  data in that case.
	  o add ncurses scroll-wheel support, which requires the
	  extended-mouse configure option of ncurses.
	  o modify initial active link in download-page to be the
	  first download action rather than the "help" link whided
	  in Novice mode.
	  o make the size of LYNXMESSAGES configurable in lynx.cfg
	  with STATUS_BUFFER_SIZE
    * improve interaction with other programs:
	  o discard anchor's post_data field in HTLoadDocument()
	  if Lynx is about to reload a do. That would happen if
	  the result of the form includes a link back to the form.
	  Removing the data causes Lynx to prompt the user, e.g.,

		    Resubmit POST content to
		    http://localhost/cgi-bin/lynxtest.pl ? (y/n)


	    to offer the user the choice between revisiting form
	    or re-POST'ing the data that was on the form
	  o pass a newline after the start of PRE-section in
	  HTGopher.c to force the first newline between records to
	  be seen and cause the lines to split
	  o add POSITIONAL_EDITOR setting to configure editors
	  which accept a "+line" parameter
	  o modify external editing of TEXTAREA to not do
	  tab-conversion.
	  o modify behavior of "-nonumbers" option for -dump so it
	  can be combined with -listonly to obtain a list of the
	  URLs without reference numbers.
	  o implement "chunked" transfer-encoding to work with
	  servers that ignore the version number in HTTP get's
	  o add an Options menu checkbox to tell if Lynx should
	  send a user-agent string. Unless the useragent restriction
	  is set, the default for this checkbox is off, so that
	  Lynx will not send the string. The corresponding setting,
	  send_useragent, may be saved to ~/.lynxrc, but normally
	  is not.
	  o change default for configure --enable-ascii-ctypes to
	  true.
	  o modify exit code when doing a "-dump" to exit with
	  error if the server returned an error status for the
	  page.
    * improve cookie support:
	  o modify cookie-writing to not write if no cookies were
	  read from the file and none are available.
	  o adapt/extend parsdate.y from tin to improve parsing of
	  cookie expiration times.
    * improvements to debug/traces:
	  o change initialization of trace file, handing this during
	  the first part of argument parsing along with -help and
	  -version, to show steps done for initialization of
	  presentors, etc
    * improvements to scripting/logging:
          o bug-fixes only
    * other improvements:
	  o build/install "en" po file so that GNU gettext LANGUAGE
	  environment variable can find the corresponding English
	  message file.
	  o if iconv_open() using transliteration fails, retry
	  without the transliteration feature.
	  o improve change for UCSetBoxChars() from 2.8.6dev.16
	  for EXP_CHARTRANS_AUTOSWITCH which assumed that the
	  line-drawing character set was always different from the
	  display character set. If both are US_ASCII for example,
	  ASCII lines would be drawn, which is not good
	  o modify scanning of floats from lynx.cfg to allow Lynx
	  to read POSIX values in non-POSIX locales
	  o replace BROKEN_PROFTPD and BROKEN_WU_FTPD logic with
	  configurable list of strings in lynx.cfg, i.e.,
	  BROKEN_FTP_RETR and BROKEN_FTP_EPSV, and add "spftp/" to
	  the predefined values for the former.
	  o modify to handle a special case where the content-type
	  is given as one of the compressed types, to check if the
	  address (after stripping the file suffix for that
	  compression) has a suffix that lynx could present For
	  example:

            		http://foo/bar.html.gz


	    would display the uncompressed "bar.html" rather than
	    offering to download the file. This also allows one to
	    add SUFFIX commands to lynx.cfg to display the
	    corresponding plain files. For example:

            		SUFFIX:CHANGES.*:text/plain:8bit
            		SUFFIX:CHANGES:text/plain:8bit


            for

            		http://foo/CHANGES.tmp.gz
            		http://foo/CHANGES.gz


          o fix ipv6 literal command-line parsing.
          o setup locale before writing version-message.

New/improved sample files:

    * add sample scripts for configuring MinGW version using Cygwin.

New ports:

    * none
      (it seems to run everywhere, but there are a few possibilities)

Improvements to existing ports:

    * UNIX:
	  o add definition for _FILE_OFFSET_BITS in CF_LARGEFILE,
	  needed for Solaris 64-bit compiles.
	  o modify UCdomap.c to work with Solaris iconv and handle
	  additional encodings:
		+ if "TRANSLIT" feature (an extension of glibc)
		does not succeed, retry the call to iconv_open
		without "TRANSLIT"
		+ add check for any MIME name beginning "iso8859",
		mapping to "iso-8859"
                + recognize "eucjp" MIME name as alias for "euc-jp"
                + recognize "pck" MIME name as alias for "shift_jis"
                + recognize "ansi-1251" MIME name as alias for "windows-1251"
          o modify parsdate.y to convert between EBCDIC/ASCII to work on z/OS
    * Linux:
          o bug-fixes only

Improvements for maintainability and testing:

    * modify definitions in LYStructs.h for union to cast to a
    void* rather than a long, to help with 64-bit ports
    * fix some mismatched BOOL vs BOOLEAN from compiler warnings
    due to dev.13 change to LYStructs.h
    * change a few options such as --enable-locale-charset option
    to non-experimental
    * free leaks of LYLeaks.c, to make it simpler to check it with
    a second tool such as valgrind.
    * use off_t rather than long for representing file sizes, e.g.,
    when used to print progress messages
    * use dtd_util to replace most of HTMLDTD.h and HTMLDTD.c with
    source generated from the existing tables in those files
    * rename variable defined by CF_PATHSP to PATH_SEPARATOR, use
    this consistently to ease use in later autoconf versions

As well as security-related changes:

    * modify prompt in LYLoadCGI() from 2.8.6dev.15 to always prompt
    user (from FEDORA-2008-9597), and modify compiled-in configuration
    default for consistency with other lynx.cfg settings to require
    that lynx.cfg be set to permit use of lynxcgi scripts.
    * modify logic for reading PERSONAL_EXTENSION_MAP and
    PERSONAL_MAILCAP to ensure that they are files that are controlled
    only by the user. The default values for these allow lynx to
    read configuration information from the user's current directory
    at lynx's startup.
    * ensure that PERSONAL_EXTENSION_MAP and PERSONAL_MAILCAP are
    absolute pathnames, performing tilde expansion as needed.
    Pathnames that are not given in absolute form will be sought
    under the user's home directory as if they began with "~/".
    * ensure that the configured values for GLOBAL_EXTENSION_MAP
    and GLOBAL_MAILCAP are absolute pathnames.

And finally:

    * A lot of bug fixes
    * A lot of documentation changes.
    * A lot of dead code removed
2009-08-09 08:20:27 +00:00
joerg
e031855e4a Convert @exec/@unexec to @pkgdir or drop it. 2009-06-14 22:00:14 +00:00
zafer
da419db8db update mirrors. remove non-working ones. 2009-05-01 15:16:12 +00:00
obache
b9ad416985 Add a note that know security issue is CVE-2005-2929, CVE-2008-4690. 2008-12-04 13:13:48 +00:00
wiz
e8c9f13f4a Install lynx.lss manually for slang option case.
(I guess it is probably not needed in this case, but the changes
to ignore it for the slang option alone are much more effort).

Addresses PR 38284 by Daniel Horecki.
2008-06-22 15:55:46 +00:00
tnn
ad6ceadd25 Per the process outlined in revbump(1), perform a recursive revbump
on packages that are affected by the switch from the openssl 0.9.7
branch to the 0.9.8 branch. ok jlam@
2008-01-18 05:06:18 +00:00