1. 26 Jul, 2020 1 commit
  2. 19 Jul, 2020 2 commits
  3. 12 Jul, 2020 1 commit
  4. 07 Jul, 2020 1 commit
  5. 06 Jul, 2020 4 commits
  6. 05 Jul, 2020 1 commit
  7. 02 Jul, 2020 2 commits
    • Philip Withnall's avatar
      soup-uri: Check string lengths before reading bytes of %-encoded chars · ab859a8a
      Philip Withnall authored
      There are two instances in `SoupURI` where `g_ascii_isxdigit()` is
      called two bytes ahead of the read pointer to check if a %-encoding is
      valid. This is fine when the string being parsed is nul-terminated (as
      the first `g_ascii_isxdigit()` call will safely return `FALSE`), but
      will result in a read off the end of the buffer if it’s
      length-terminated (and doesn’t happen to also be nul-terminated).
      Thankfully, that’s not the case in any of the code paths in `SoupURI`
      leading to these two instances, so this is not a security issue.
      However, the functions should probably be fixed to do an appropriate
      length check, just in case they get called from somewhere else in
      Spotted by oss-fuzz in oss-fuzz#23815 and oss-fuzz#23818, when it was
      fuzzing the new `GUri` implementation in GLib, which is heavily based
      off this code.
      Includes two unit tests which don’t actually trigger the original
      failure (as all strings passed into `SoupURI` are forced to be
      nul-terminated), but would trigger it if the nul termination was not
      Signed-off-by: Philip Withnall's avatarPhilip Withnall <withnall@endlessm.com>
    • Boyuan Yang's avatar
      Update Chinese (China) translation · 7199743b
      Boyuan Yang authored
  8. 29 Jun, 2020 1 commit
  9. 28 Jun, 2020 2 commits
  10. 27 Jun, 2020 3 commits
  11. 26 Jun, 2020 2 commits
  12. 16 Jun, 2020 1 commit
  13. 06 May, 2020 1 commit
    • Ross Burton's avatar
      tests: check for curl at runtime · 4d6630a5
      Ross Burton authored
      Don't use the presence of curl at configure time to decide whether to
      run these tests when installed.
      Instead of always respecting HAVE_CURL which makes no sense for the
      installed tests, simply check if curl is present at test runtime and
      skip if not.
      Also remove HAVE_CURL from meson.build as this removes all users.
  14. 23 Apr, 2020 1 commit
    • Chun-wei Fan's avatar
      soup-brotli-decompressor.h: Fix build on Visual Studio · e5cd9c84
      Chun-wei Fan authored
      A SOUP_AVAILABLE_IN_2_68 (which expands to __dllspec(dllexport) extern
      was missed in the use of G_DECLARE_FINAL_TYPE (SoupBrotliDecompressor...),
      which broke Visual Studio builds because the first prototype of
      soup_brotli_decompressor_get_type() (that results from the
      G_DECLARE_FINAL_TYPE macro) was not marked with __declspec(dllexport)
      but the second one at line 35 is, which Visual Studio does not allow.
  15. 15 Apr, 2020 1 commit
    • Ross Burton's avatar
      tests: always install test data · 0232368c
      Ross Burton authored
      The files test-cert.pem, test-key.pem, and index.txt are used in several
      tests, not just the ones using Apache:
      ross@bob /usr/libexec/installed-tests/libsoup-2.4 $ ./chunk-test
      Unable to create server: Failed to open file “./test-key.pem”: No such
      file or directory
      Always install these files if installed tests are enabled, not just when
      apache tests are enabled.
  16. 11 Mar, 2020 1 commit
    • Simon McVittie's avatar
      test-utils: Clarify meaning of an environment variable · 3058a0ed
      Simon McVittie authored
      SOUP_TESTS_IN_MAKE_CHECK used to be used for the Autotools build system.
      I mistakenly thought it was a way to skip the Apache-dependent tests
      during `make check`, but in fact the Autotools build system used to
      start a single instance of Apache, then run all the tests against that
      single instance, and finally shut it down.
      This mechanism is currently unused, but resurrecting it might be one way
      to avoid #175.
  17. 07 Mar, 2020 1 commit
  18. 04 Mar, 2020 2 commits
  19. 22 Feb, 2020 1 commit
  20. 18 Feb, 2020 1 commit
  21. 17 Feb, 2020 1 commit
  22. 14 Feb, 2020 1 commit
  23. 03 Feb, 2020 1 commit
  24. 29 Jan, 2020 2 commits
  25. 28 Jan, 2020 1 commit
  26. 22 Jan, 2020 1 commit
  27. 21 Jan, 2020 3 commits
    • Patrick Griffis's avatar
      Remove MAINTAINERS · e2b29f34
      Patrick Griffis authored
      This is no longer used in favor of the doap file
    • Patrick Griffis's avatar
      Update .gitignore · 0b01e3dd
      Patrick Griffis authored
    • Patrick Griffis's avatar
      Expose support for same-site cookies · d4f8cff2
      Patrick Griffis authored
      This adds API for web browsers to set extra information to support
      same-site cookies.
      Note that usage of SoupSession alone does not provide enough
      information to reasonably use these at the moment and require
      manually setting the information with the extra context a browser
      may have.