commit/naviserver: 2 new changesets

[Bitbucket <com...@bi...>]

2 new commits in naviserver:

https://bitbucket.org/naviserver/naviserver/commits/dc02989983ec/
Changeset:   dc02989983ec
User:        gustafn
Date:        2019-07-16 17:33:36+00:00
Summary:     improve comment
Affected #:  1 file

https://bitbucket.org/naviserver/naviserver/commits/e08c3449bfc5/
Changeset:   e08c3449bfc5
User:        gustafn
Date:        2019-07-16 17:44:13+00:00
Summary:     new global parameter "sanitizelogfiles", per default turned on

If data entered into a log file containing special characters (e.g. end line characters),
these could alter the appearance of content within the log file. Single entries may
appear as multiple entries. Attackers may leverage log forging to insert fake entries to
that obfuscate malicious acts, or these can confuse log-file analyzers to avoid
analysis.

New flag "-sanitize true|false" for "ns_asynclogfile write".
The global paramter sanitizelogfiles is used as default sanitize.
Affected #:  7 files

Repository URL: https://bitbucket.org/naviserver/naviserver/

--

This is a commit notification from bitbucket.org. You are receiving
this because you have the service enabled, addressing the recipient of
this email.