* 2005-02-23 00:11 (Medium) Should not automatically retry request on 403
and other server errors
* 2005-02-21 17:02 (Minor) fqdn lookups with spaces may confuse redirectors
* 2005-02-21 03:38 (Cosmetic) Display FTP URLs in decoded format to allow for
sane display of national characters etc
* 2005-02-21 02:58 (Minor) Peer related memory leaks on "squid -k reconfigure"
* 2005-02-21 01:38 (Cosmetic) Doesn't work specifying the AR variable to
configure
0.19 2005-02-15
- Add support for Apache::RequestRec as header_object by checking
header_object for err_headers_out and headers_out methods.
0.18 2004-06-30
- Made the password & lock_password parameters default to undef.
1.09 Fri Feb 25 17:49:00 EST 2005
- Tables can now be selected by table tag attributes
- lineage() method now returns row and column information, as
well as depth and count, for each ancestor (potential
backwards incompatability, entries are now 4 element arrays
now rather than 2)
- header matching and column retention enhancements
- header retention
- old-style procedures deprecated in prepration for them to
become methods
- various bug fixes
And switched to use gtk2.
Changes from release notes:
* Improved stability
* International Domain Names are now displayed as punycode.
(To show International Domain Names in Unicode, set the
"network.IDN_show_punycode" preference to false.)
* Several security fixes.
MFSA 2005-29 Internationalized Domain Name (IDN) homograph spoofing
MFSA 2005-28 Unsafe /tmp/plugtmp directory exploitable to erase user's files
MFSA 2005-27 Plugins can be used to load privileged content
MFSA 2005-26 Cross-site scripting by dropping javascript: link on tab
MFSA 2005-25 Image drag and drop executable spoofing
MFSA 2005-24 HTTP auth prompt tab spoofing
MFSA 2005-23 Download dialog source spoofing
MFSA 2005-22 Download dialog spoofing using Content-Disposition header
MFSA 2005-21 Overwrite arbitrary files downloading .lnk twice
MFSA 2005-20 XSLT can include stylesheets from arbitrary hosts
MFSA 2005-19 Autocomplete data leak
MFSA 2005-18 Memory overwrite in string library
MFSA 2005-17 Install source spoofing with user:pass@host
MFSA 2005-16 Spoofing download and security dialogs with overlapping windows
MFSA 2005-15 Heap overflow possible in UTF8 to Unicode conversion
MFSA 2005-14 SSL "secure site" indicator spoofing
MFSA 2005-13 Window Injection Spoofing
for www/firefox.
- deal with Linux binaries having a different directory structure than
others on the MASTER_SITES.
- undo some brain damage when MOZILLA_USE_LINUX is defined.
1.12 Thu Feb 24 23:38:44 CST 2005
[FIXES]
* Fixed RT #9026: hang in t/local/back.t under Windows XP.
Thanks Andrew Savige. It also should no longer complain
about being unable to clean up a temp file.
1.11_01 Mon Feb 14 00:12:48 CST 2005
[THINGS THAT MAY BREAK YOUR CODE]
* Removed deprecated _parse_html() method.
[FIXES]
* Was incorrectly looking for INPUT tags TYPE="SUBMIT" as images.
Thanks to Abe Timmerman.
[ENHANCEMENTS]
* Calling $mech->set_fields() with no current form now dies.
Thanks to Julien Beasley.
* Fix crash when closing window while filepicker is up [#156816]
* Use gnome_vfs_url_show() for Send To [#162532]
* Set selection mode to BROWSE in topics selector [#162331]
* We don't need to implement nsIBrowserHistory
* Don't focus the close-tab button on click [#119461]
* Don't store more than 5 hidden popups [Adam Hooper, #160863]
* Fix a mem leak [#164302]
* Really make confirm-overwrite dialogue have a parent window [#164189]
* Rename EphyTab's "visible" property to not clash with GtkWidget property
* Default typeaheadfindsea to on [#157435]
* Switch to fullscreen toolbar also in lockdown fullscreen mode [#165256]
* Disable DownloadLinkAs and SetAsBackground if saving to disk is disabled
* Don't crash if we need to open an orphan non-chrome window [part of #165445]
* Some sparse fixes
* Ungrab the pointer when moving tab between notebooks [#165797]
* Don't weak ref the shell when it's finalised already [#165542]
* Don't show the menubar with F10 in lockdown mode [#165550]
* Don't disable print preview if print setup is locked down [#165552]
* Adapt to mozilla API changes
* Implement nsIWebProgressListener [#165328]
* Fix window destruction [#165992]
Wed Feb 23 19:46:01 MET 2005 mikulas:
Correct implementation of non-aggressive cache (i.e. allow more keywords
in Cache-Control
Wed Feb 23 18:36:52 MET 2005 mikulas:
Allow typing only characters valid in current character set into form
fields on web
Wed Feb 23 16:31:56 MET 2005 Serge Winitzki <serge at cosmos dot phy dot tufts dot edu>:
Updated Russian translation
Wed Feb 23 16:25:41 MET 2005 mikulas:
Allow cookies without a value
Mon Feb 14 13:15:00 MET 2005 user:
When server returns cookie values as "deleted", delete it
Tue Feb 1 18:22:11 MET 2005 user:
Fixed non-working find next/previous in view menu
Thu Jan 27 19:09:46 CET 2005 mikulas:
Fixed wrong prototypes causing compilation problem on MacOS X and some
other systems
Thu Jan 27 16:28:35 MET 2005 mikulas:
Fixed configure failure on Solaris
Thu Jan 27 00:23:09 CET 2005 Brain
javascript: set form action
> v3.2 (Dec-29-2004)
> * Some options were missing in apache 1.3x part of the code.
>
> * There was a syntax error in TLS related code. Thanks for many of you
> who pointed it out.
>
> * Don't try to re-initialize TLS. Thanks to Volker for pointing it out.
>
> * if the ldap header files and libaries are no in ldap base directory,
> they can be specified with --with-ldap-includes and
> --with-ldap-libraries respectively.
>
> v 3.3 (Dec-30-2004)
> * some tls code was outside
does. This allows us to use dynamic PLISTs for Perl modules that are
built using Module::Build. Bump the PKGREVISION of p5-Module-Build
to 1.
* Drop the use of PERL5_USES_MODULE_BUILD and introduce a new variable
PERL5_MODULE_TYPE that is either "MakeMaker" or "Module::Build" that
names the framework used to build/install the module.
* Split out the variables set in perl5/buildlink3.mk that are also used
by perl5/module.mk into a new file perl5/vars.mk. Move some PERL5_*
variable definitions from pkgsrc/mk/bsd.pkg.use.mk into perl5/vars.mk.
This just centralizes the common PERL5_* definitions into a single
file location.
* Convert the known packages that use Module::Build to set
PERL5_MODULE_TYPE and PERL5_PACKLIST:
devel/p5-Class-Container
devel/p5-Exception-Class
devel/p5-Log-Dispatch
devel/p5-Array-Compare
textproc/p5-Pod-Coverage
www/p5-Apache-Session-Wrapper
www/p5-MasonX-Request-WithApacheSession
o 1.33 - December 15, 2004
MacOSX docs tweaks [David Wheeler]
fix Makefile.PL to properly skip the test suite if A-T requirements
weren't satisfied [Stas]
require Apache::Test 1.13 to run perl tests (need() was added at that
version) [Stas]
Fix `strEQ' redefined warnings in the perl build [Stas]
Upgrade license to the Apache License Version 2.0. [davidw, joes]
o 1.32
Fix mfd's Content-Type parser to deal with Opera 7.2's extra attributes.
For details see
http://marc.theaimsgroup.com/?l=apreq-dev&m=106606052700407&w=2
Bug first reported by Sven Geisler [joes].
o 1.31 - ongoing
added a proper implementation of the ithreads support. At the same
time it should resolve the problem with perl 5.8.2 under threaded
applications, since it no longer relies on the implicit context and
passes aTHX around. [Stas]
o 1.30 - September 27, 2003
libapreq-1.3 is released.
o 1.25 - August 23, 2003
Michael G. Schwern's "play it safe" patch to c/Makefile.PL
(applied patch submitted by Steve Hay). See
http://marc.theaimsgroup.com/?l=perl5-porters&m=105981649201380&w=2http://marc.theaimsgroup.com/?l=apreq-dev&m=106146287323705&w=2
for details. [joes]
o 1.24 - August 23, 2003
Applied Steve Hay's Request.pm doc patch explaining the tempnam()
dependence for C<Apache::Request::new()>'s TEMP_DIR option. [joes]
o 1.23 - July 10, 2003
Applied Graham Clark's patch to cleanup apache_request.h macros.
Added missing doc credits for Steve Hay in Request.pm. [joes]
o 1.22 - July 5, 2003
Open uploaded files with binary mode (relevant for Perl > 5.7),
so as to be able to get the correct sizes on systems where such
a mode makes a difference. Thanks to Steve Hay for first pointing
out this problem. [randyk]
o 1.21 - June 25, 2003
Fix memory access problem with TEMP_DIR - see
http://marc.theaimsgroup.com/?l=apreq-dev&m=105647058517842&w=2
Thanks to Jay Buffington for the spot. [joes]
=item 1.20 - January 22, 2005
instead of trying to match various custom server name variations (each
vendor seems to replace "Apache" in 'httpd -v' with their own name),
just try to match the "/x.y" in "Foo-Apache-Bar/x.y.z" to figure out
the server generation (rev). [Stas]
extend Apache::TestConfig::which() to search under perl's bin
directory (in the case of local perl install many utils get installed
there, but won't be in PATH). [Stas]
Apache::TestConfig::inherit_load_module handles .dll modules
(previously was only .so) [Stas]
Apache::TestConfig::should_skip_module now works with regex
patterns. [Stas]
=item 1.19 - January 5, 2005
Test for module.c instead of module.so for IfModule in
find_and_load_module [Chia-Liang Kao <chialiang gmail.com>]
Apache-Test/META.yml is excluded from mp2 distro to make PAUSE indexer
happy, but then perl Makefile.PL complains about a missing META.yml,
so autogenerate it if it wasn't in the distro [Stas]
=item 1.18 - December 23, 2004
fix a bug in A-T config generation, when a vhost entry was in
autogenerated httpd.conf (e.g. coming from .pm file) and another from
extra.conf.in. We used to have a ports collision, since extra.conf
wasn't reparsed and the same port was getting assigned to more than
one vhost entry, preventing server startup:
default_ VirtualHost overlap on port 8530, the first has precedence
(98)Address already in use: make_sock: could not bind to address
0.0.0.0:8530 no listening sockets available, shutting down
could be reproduced with t/TEST -conf followed by t/TEST -maxclients 1
in the mp2 test suite (or the new Apache-TestMe test suite, which now
includes a special setup for this bug). [Stas]
new TestConfig wrapper find_and_load_module [Chia-Liang Kao <chialiang
gmail.com>]
add Apache-TestItSelf and Apache-TestMe sub-projects. [Stas]
add various straps to aid the new Apache-TestItSelf sub-project, which
is used to test A-T config options [Stas]
avoid entering endless loops when interactive config is used, by
restarting the test suite with an explicit selected arguments for
-httpd (and optionally -apxs) [Stas]
META.yml is now locally maintained. we need to tell PAUSE indexer not
to try to index HTTP::Request::Common and warnings packages, which
happen to be used by A-T [Stas]
=item 1.17 - December 11, 2004
Apache::TestHandler: need to load Apache::RequestIO for mp2 for puts()
to work [Stas]
new Apache::TestConfig wrapper untaint_path() [Randy Kobes]
fix the config thaw() functionality (when top_dir wasn't in @INC the
saved config won't be loaded and tests will blow) [Stas]
new wrapper Apache::TestRequest::module2url to simplify handling of
vhosts in the client. ["Christopher H. Laco" <apache-test
chrislaco.com>]
resolve -T taint issues: [Stas]
- untaint $cmd in Apache::TestConfig::open_cmd
- fix the tainting of @INC (by untaintinig top_dir variable)
require Cwd 2.06 or higher (to solve File::Spec::rel2abs problems
under -T). Enforce the modules version requirements for those who
aren't running under CPAN/CPANPLUS shell) [Stas]
Apache::TestTrace: don't export by default the 'todo' utility's symbol
since it collides with Test::More [Stas]
Tweak the handling of mp2 source build case in
Apache::TestConfig::httpd_config(), apparently mp2 source build
doesn't always know where httpd/apxs are, so we need to give a better
error message in this particular case. [Stas]
Add cookie jar tests ["Christopher H. Laco" <apache-test
chrislaco.com>]
Don't run interactive prompts when STDIN is closed [Stas]
Add LockFile directive in the autogenerated httpd.conf, which points
to t/logs, to handle the case where LockFile is hardcoded at compile
time to some other directory on the system. [Stas]
in next release.
Changes since 2.1pre15:
Sat Jan 22 20:27:41 cet 2005 mikulas:
Fixed empty lines in lists in graphics mode
Sat Jan 22 04:40:28 cet 2005 mikulas:
On OS/2 use 8.3 temp names, allowing DOS viewers
Sat Jan 22 03:55:08 cet 2005 mikulas:
Send Accept-Language
Sat Jan 22 02:05:47 MET 2005 user:
Display is scrolled to see the whole textarea when modifying it
Wed Jan 19 02:57:56 MET 2005 Jakub Bogusz
Updated Polish translation
Wed Jan 19 01:39:44 MET 2005 mikulas:
-dump url
Completed option documentation in links -h
Sun Jan 16 23:57:58 MET 2005 user:
Fixed bug in svgalib accelerator (tested for different operations)
Mon Jan 10 23:04:22 MET 2005 mikulas:
Support for border on framebuffer (use -mode left,top,right,bottom)
to set screen border
Sun Jan 2 20:46:18 MET 2005 Dieter
Fix warnings on 64-bit machines
Sun Jan 2 20:39:51 MET 2005 Edward Rosten
Block ad images
Sun Jan 2 18:51:15 cet 2005 mikulas:
Do not cache redirects if redirect loop is going to happen
Wed Nov 17 15:16:01 MET 2004 user:
Support for mms:// urls
Tue Nov 16 15:18:55 MET 2004 mikulas:
Send content-type when uploading files
Tue Nov 9 00:12:05 MET 2004 user:
^O to go to next form field in braill mode
Sun Oct 31 17:17:53 MET 2004 mikulas:
Correct jump at tag if it points to position, that moves during loading
Sat Oct 23 22:14:03 MET 2004 user:
Disallow opening new windows in anonymous mode
Fri Oct 22 22:31:20 MET DST 2004 mikulas:
Fixed bugs discovered with mangleme:
http://lcamtuf.coredump.cx/mangleme/mangle2.cgi
memory leak with nested <select multiple name=n> tags
integer overflow in frame widths causes an internal error
internal error with base url only containing //
internal error with base url containing javascript:
fixed incorrect generating of title (does not cause crash, but excessive
memory allocation)
fixed some quadratic algorithms in title displaying
internal error with invalid codebase attribute in OBJECT tag
fixed quadratic algorithm in menu creating
Fri Oct 22 20:12:05 MET DST 2004 mikulas:
Cleaned up configure script, wrote some more replacements of non-present
functions
Fri Oct 22 20:11:56 MET DST 2004 mikulas:
Fixed a lot of cases where overflowed integer arithmetic could cause
memory allocation corruption
Sat Oct 16 21:38:00 MET 2004 user:
Allow browsing local and ftp files with '#' in filename
Mon Oct 11 01:26:54 CEST 2004 Karel Karlik
Fixed framebuffer in 15 and 16-bit modes
Wed Oct 6 00:39:27 MET 2004 user:
Improved parsing of ftp directories in Windows NT format
Sun Oct 3 17:37:32 MET 2004 user:
Correct reporting of error on ftp directories
Sat Oct 2 04:29:40 MET 2004 user:
Ctrl-U cuts into clipboard
Fri Oct 1 15:51:37 MET 2004 user:
Display the whole page when connection to an image stucks
Thu Sep 23 18:47:11 MET 2004 user:
Resolving of double '..' in references
Fri Sep 10 04:23:24 cet 2004 mikulas:
Correctly find file extension if '?' and ';' is in ftp file
Fri Sep 3 03:07:52 MET DST 2004 Wojciech Puchar
Portability fixes for SunOS
Fri Sep 3 02:47:18 MET DST 2004 mikulas:
Fixed memory leak in http authentication
Wed Sep 1 19:08:46 MET DST 2004 Strahinya Radich
Updated Serbian translation
Sun Aug 29 17:43:39 MET DST 2004 mikulas:
Fix crash when saving options in svgalib due to missing shell
Thu Jul 29 13:03:07 MET 2004 user:
Allowed dots in extensions (for example "ps.gz")
Sun Jul 25 00:34:04 MET DST 2004 mikulas:
Allow Ctrl-Z in framebuffer driver
Sat Jul 24 14:56:13 MET DST 2004 mikulas:
Fixed an error when signal interrupted another syscall
Sat Jul 24 02:15:35 MET 2004 user:
Fixed bad error codes because of errno modified by signal handler
Fri Jul 23 21:29:22 MET 2004 user:
Fixed links stuck after Ctrl-Z when one code path lasted more than
1 second (because of pagefault, too high cpu load or similar)
Fri Jul 23 20:15:29 MET 2004 user:
Fixed incorrectly displayed character entities (&) in attributes (img
alt, etc.)
Tue Jun 29 03:35:32 MET 2004 user:
Fixed overflow when accessing local files >= 2G
Mon Jun 28 01:34:45 MET 2004 user:
Ctrl-K cuts current line
Sat Jun 26 13:54:53 MET DST 2004 mikulas:
Send Content-Type when uploading files
Sat Jun 26 02:24:32 MET 2004 user:
y and t move word forward and backward in braille terminal
Sat Jun 26 00:35:17 MET 2004 user:
Resolve dot-number IP address on systems when gethostbyname and
gethostbyaddr can't resolve it
Mon Jun 21 15:02:25 MDT 2004 mpat7421:
Fixed compilation problems on Irix
Sun Jun 20 18:49:53 MET DST 2004 mikulas:
Posting of <option> fields in correct charset
Sun Jun 20 15:58:08 MET DST 2004 Sam
SDL graphics driver
Sat Jun 19 18:10:05 MET 2004 user:
Fixed case when '&' entities or special characters were in ftp or disk
filenames
Sat Jun 19 18:09:50 MET 2004 user:
Fixed compilation problem on AIX
Thu Jun 17 20:32:59 MET DST 2004 mikulas:
Correct handling of Ctrl-Z when executing user viewer
Fri Jun 11 03:17:20 MET 2004 user:
Fixed incorrect error handling in smb
Sun Jun 6 03:12:00 MET 2004 user:
Allow '@' in ftp password in url
Thu Jun 3 22:39:24 MET 2004 user:
Allow characters >= 128 in ftp filenames
Fri May 28 15:40:35 CEST 2004 mikulas
Handling URLs in form http://host?params
Mon May 17 17:10:22 MET DST 2004 Serge Winitzki
Updated German and Russian localization
Add new two patches:
* 2005-02-20 19:11 (Cosmetic) GCC4 warnings
* 2005-02-20 10:47 (Minor) Relax header parsing slightly again to work
around broken web servers
Reflect update of one patch:
* 2005-02-20 11:03 (Cosmetic) Cross-platform format fixes
Update DIST_SUBDIR.
HTTP::Cache::Transparent is an implementation of http get that
keeps a local cache of fetched pages to avoid fetching the same
data from the server if it hasn't been updated. The cache is stored
on disk and is thus persistent between invocations.
The http-headers If-Modified-Since and ETag are used to let the
server decide if the version in the cache is up-to-date or not.
1.10
[FIXES]
* Fixed bug where images inside of links would not be found.
* Fixed test failures because of Google changes. Thanks to
Offer Kaye and others who sent in patches.
[DOCUMENTATION]
* More samples in the FAQ. Thanks to Joshua Gatcomb.
[INTERNALS]
* Added explanation of running live tests against Google in Makefile.PL.
1.08 Fri Dec 24 01:01:06 CST 2004
[ENHANCEMENTS]
* Added find_image() and find_all_images().
1.06 Wed Dec 8 14:58:39 CST 2004
[INTERNALS]
* Now uses the base pragma instead of setting @ISA.
1.05_04 Fri Nov 5 23:35:38 CST 2004
[ENHANCEMENTS]
* Added WWW::Mechanize::Image object for representing images.
* Improved the regex on the URL for META tags.
* Added --images flag to mech-dump.
[FIXES]
* When parsing urls out of meta refresh tags, "url" may now be
uppercase (RT#8230)
* Behavior of back() fixed in a number of cases (RT#8109 reported by
Josh Purinton, patched by Dominique Quatravaux)
[INTERNALS]
* Mark figured out to how to prevent his text editor from putting tabs
into the code. Andy's blood pressure dropped slightly.
1.05_03 Sun Oct 31 20:54:33 CST 2004
[ENHANCEMENTS]
* click_button() has a new input option for HTML::Form::SubmitInput
objects (DOMQ)
* content() has new options to return the page formatted
as text, with a <base href> added. (RT#8087, patch by
Dominique Quatravaux)
* update_html() method has been added, which can be used
to modify the HTML that Mech parses. It should be sub-classed
instead of _parse_html(), which has been deprecated.
(RT#8087, patch by Dominique Quatravaux)
* select() has new option to select an option by number
(RT#5789, Scott Lanning)
* WWW::Mechanize::Link now has support providing all the
attributes of the link through a new attrs() method, which
returns them as a hashref. This is a replacement for the
alt() method, added in 1.05_01. It's not backwards
compatible with that, but, hey, that's what developer
releases are for. (RT#8092, Rob Casey and Mark Stosberg)
[FIXES]
* Upload <input type="file" ... > does not use the default
value to prevent attacks, patch by Jan Pazdziora (RT #7843).
[INTERNALS]
* Improved tests and documentation for select() (RT#5789,
Scott Lanning)
* Improve taint-safeness on Perl 5.6.1 (RT#8042, patch by
Dominique Quatravaux)
* Added tests for click_button() (RT#8061, by Dominique
Quatravaux)
* Require URI 1.25, fixing bug which exposed itself in
WWW::Mechanize (RT#3048)
* Move select() to better location in docs. Document and
test the return values. The return value is now "1" on
success instead of the undocumented behavior of returning
a form value. (RT#6138, spotted by MJD, patched by Mark
Stosberg)
* Possible matching tags for the find_link() 'tag_regex'
attribute are now documented. (RT#2989, by Mark Stosberg)
* refactored find_link() to avoid use of eval(). This should
improve performance a bit and avoid potential security
issues. (Mark Stosberg)
1.05_02 Sat Oct 2 16:55:59 CDT 2004
[ENHANCEMENTS]
* Added the $mech->save_content( $filename ) function, so you
can dump stuff to files easily.
1.05_01 Thu Sep 30 21:04:44 CDT 2004
[FIXES]
* set_visible() doesn't stop setting values when it finds a zero.
[ENHANCEMENTS]
* WWW::Mechanize::Link has a new, easier to remember constructor
interface. The old one is still supported. Support for including
an 'alt' attribute was added, which is useful for <area> links.
(RT #3317). Thanks to Mark Stosberg.
* When links are extracted from <area> tags, the ALT attribute will
be captured and become part of the WWW::Mechanize::Link object.
(RT #3317). Patch by Mark Stosberg.
[INTERNALS]
* t/mech-dump.t is now more portable (RT #7690)
* t/local/follow.t has new tests to confirm that 'follow*' functions
work with characters like o-umlaut, even when the o-umlaut is
encoded in the HTML, but not in the call to follow(). (RT #2416)
By Mark Stosberg.
This release includes the following changes:
o added --ftp-account and CURLOPT_FTP_ACCOUNT
o added CURLOPT_SOURCE_URL and CURLOPT_SOURCE_QUOTE
o obsoleted CURLOPT_SOURCE_HOST, CURLOPT_SOURCE_PATH, CURLOPT_SOURCE_PORT
and CURLOPT_PASV_HOST
o added --3p-url, --3p-user and --3p-quote
o -Q "+[command]" was added
o src/getpass.c license issue sorted (code was rewritten)
o curl -w now supports 'http_connect' for the proxy's response to CONNECT
o introducing "curl-config --protocols"
This release includes the following bugfixes:
o re-sending a request when retrying on a fresh connection with multi
interface
o improved valgrind report parser in the test suite
o several valgrind reports
o CURLOPT_FTPPORT and -P work when built ipv6-enabled
o FTP third party transfers was much improved
o proxy environment variables are now ignored when built HTTP-disabled
o CURLOPT_PROXY can now disable HTTP proxy even when built HTTP-disabled
o "curl dictionary.com" no longer assumes DICT protocol
o re-invoke some system calls on EINTR
o duplicate Host: when failed connection re-use
o SOCKS5 version check
o memory problem with cleaning up multi interface
o SSL certificate name memory leak
o -d with -G to multiple URLs crashed
o double va_list access crash fixed
o minor memory leak when "version" is set in a cookie header
o builds fine on BeOS and NetBSD
o builds and runs fine on FreeBSD
