thttpgpd/TODO at master · Open-UDC/thttpgpd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

TO TEST:

 * chroot: should no more work since we use gpgme.

TODO:

- - - - - - - -  OpenUDC - high priority - - - - - - - - -

 * udc.c: manage creation sheets and transactions.


- - - - - - - - HTTP engine - high priority - - - - - - - - -

 * remove some compilation warning (cf. https://travis-ci.org/Open-UDC/thttpgpd ).

 * Have directory indexing skip files that start with dot?  Except ..?
In libhttpd.c:
+               if (*(de->d_name) == '.' && *(de->d_name+1) != '.')
+                   continue;
                namlen = NAMLEN(de);

 * Add comment on INDEX_NAMES that it should be simple filenames only.

 * The error page generated for non-local referers should include the
   original URL as an active link.


- - - - - - - - - HTTP engine - later - - - - - - - - -

Re-add error page customization feature (removed previously, cf old thttpd sources).

Document how symlinks interact with .htpasswd - authorization is checked
on the result of the symlink, and not the origin.

SIGHUP log re-opening doesn't work if you started as root.

Change redirect to put the Refresh command in the HTTP headers, instead of
a META tag.

Better manage TCP_NODELAY fo CGIs and spawned process (make it configurable ?) .
cf: * http://stackoverflow.com/questions/3761276/when-should-i-use-tcp-nodelay-and-when-tcp-cork
    * https://t37.net/optimisations-nginx-bien-comprendre-sendfile-tcp-nodelay-et-tcp-nopush.html

Add stat cache?  1 minute expiry?

Ifdef the un-close-on-exec CGI thing for Linux only.

Add keep-alives, via a new state in thttpd.c.

- - - - - - - - - HTTP engine - someday - - - - - - - -

The special world-permissions checking is probably bogus.  For one
thing, it doesn't handle restrictive permissions on parent directories
properly.  It should probably just go away.

redirect should interpret a path with a trailing / as /index.html

ssi should change $cwd to the source document's location.

Allow .throttle files in individual directories.

Log-digesting scripts.

Config web page.
    Common errors:
	Not realizing that -c overrides CGI_PATTERN instead of augmenting it.
	Using a directory name for the -c pattern.