Project

General

Profile

Todo #12354 » 136.diff

Viktor Gurov, 10/09/2021 05:48 AM

View differences:

net/pfSense-pkg-haproxy-devel/Makefile
2 2

  
3 3
PORTNAME=	pfSense-pkg-haproxy-devel
4 4
PORTVERSION=	0.62
5
PORTREVISION=	4
5
PORTREVISION=	5
6 6
CATEGORIES=	net
7 7
MASTER_SITES=	# empty
8 8
DISTFILES=	# empty
net/pfSense-pkg-haproxy-devel/files/usr/local/pkg/haproxy/haproxy.inc
2180 2180
			}
2181 2181

  
2182 2182
			fwrite ($fd, $config_actions);
2183
			// CVE-2021-40346 workaround
2184
			fwrite ($fd, "\thttp-request  deny if { req.hdr_cnt(content-length) gt 1 }\n");
2185
			fwrite ($fd, "\thttp-response deny if { res.hdr_cnt(content-length) gt 1 }\n");
2183 2186
			// Write backends after advanced options so custom use_backend rules can be applied first.
2184 2187
			fwrite ($fd, $config_usebackends);
2185 2188
			fwrite ($fd, $config_usedefaultbackends);
net/pfSense-pkg-haproxy/Makefile
2 2

  
3 3
PORTNAME=	pfSense-pkg-haproxy
4 4
PORTVERSION=	0.61
5
PORTREVISION=	3
5
PORTREVISION=	4
6 6
CATEGORIES=	net
7 7
MASTER_SITES=	# empty
8 8
DISTFILES=	# empty
net/pfSense-pkg-haproxy/files/usr/local/pkg/haproxy/haproxy.inc
2078 2078
			}
2079 2079

  
2080 2080
			fwrite ($fd, $config_actions);
2081
			// CVE-2021-40346 workaround
2082
			fwrite ($fd, "\thttp-request  deny if { req.hdr_cnt(content-length) gt 1 }\n");
2083
			fwrite ($fd, "\thttp-response deny if { res.hdr_cnt(content-length) gt 1 }\n");
2081 2084
			// Write backends after advanced options so custom use_backend rules can be applied first.
2082 2085
			fwrite ($fd, $config_usebackends);
2083 2086
			fwrite ($fd, $config_usedefaultbackends);
(1-1/2)