CVS log for pkgsrc/www/paros/Makefile

Up to [cvs.NetBSD.org] / pkgsrc / www / paros

Request diff between arbitrary revisions

Keyword substitution: kv
Default branch: MAIN

paros: disable RELRO/MKPIE checks for prebuilt binaries

Pullup ticket #5637 - requested by sevan
www/paros: build fix

Revisions pulled up:
- www/paros/Makefile                                            1.18

---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Mon Nov  6 13:33:48 UTC 2017

   Modified Files:
           pkgsrc/www/paros: Makefile

   Log Message:
   paros: fix HOMEPAGE, set LICENSE

paros: fix HOMEPAGE, set LICENSE

paros: Disable SSP checks for bundled libraries.

Skip shared library check for non-native binaries.

Set unwanted linux binaries to CHECK_SHLIBS_SKIP.

CHECK_SHLIBS_SUPPORTED=no.

Linux/Windows binaries are in distribution.

Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.

Fix PLIST after unzip default flags change. Bump PKGREVISION.

Add DESTDIR support.

Second round of explicit pax dependencies. As reminded by tnn@,
many packages used to use ${PAX}. Use the common way of directly calling
pax, it is created as tool after all.

Fix CATEGORIES, duh.

Update to latest version, 3.2.13

Changes:

New
- skipping designated URL in spider.  Use options to set the spider.
- auto update menu and periodic check for update (Windows and Linux
  platform only).

Fix
- the use of new external library caused slower performance of proxy.
  Restored to older library.

Update to 3.2.12

3.2.12
======

New
-	Use newest external library for HTTP handling.
-	enable/disable spider to POST forms in options panel to avoid
        generating unwanted traffic (default to enable).  This is requested
	by many users.
-	Decrease the number of possible combinations crawled by spider on
        forms with multiple SELECT/OPTIONS.  This make crawling less
	resource consuming and lower chance to affect application being scanned.
-	Minor UI changes.

Fix
-	Fallback database library to previous version as in Paros 3.2.10
        because of a problem with hsqldb where some byte combination may
	consume 100% cpu time.
-	Increase width of method display in history to cater for other
        longer method names.
-	Default file scans may display incorrect HTTP message body if the
        original message is a POST request.

3.2.11
======

New
- Revamp History log panel.
- Added "tag..." in right-click pop-up window for History log panel.  This
  help to quickly identify a HTTP message in History display.
- Concurrent delete of multiple URL's in the site hierarchy (sf.net request
  ID 1472300).
- Use of newest db library.

Fix
- For POST request, if the body contain binary parameters of certain pattern,
  it may be unable to issue a re-send because URLDecode failed to decode
  properly.

Update to version 3.2.10

Changes:

- Tracking session state problem reported (previously only restart
  can reset session state).
- Paros startup problem when added server authentication into
  authentication panel.
- Authentnciation entry reappear even after deleted (when proxy
  reloads).

Removed the superfluous "quotes" and 'quotes' from variables that don't
need them, for example RESTRICTED and SUBST_MESSAGE.*.

Recursive revision bump / recommended bump for gettext ABI change.

Update to version 3.2.9

Changes:

New
- Continuous browser display when selecting in History panel.
- Use final stable version of external library.
- Record working directory for all subsequent file access within
  the same Paros instance.
- Improved spider capability to crawl forms with textarea and handle
  links with "&"
- Improved check for cross-site script without bracket.
- Improved check for PHP error and MySQL.
- Improved blind sql check on double quotes.

Fix
- if request body contain certain binary bytes it may cause unnecessary
  encoding and corrupt the request.  Fixed to always submit contain
  binary bytes.
- better handling of accepted-encoding.

The license dialog is case-sensitive.. and the file included is all lowercase.
Duh.

Initial import of paros-3.2.8: HTTP/HTTPS proxy for assessing web application
vulnerabilities.

A Java based HTTP/HTTPS proxy for assessing web application vulnerabilities.
It supports editing/viewing HTTP messages on-the-fly. Other features include
spiders, client certificate, proxy-chaining, intelligent scanning for XSS
and SQL injections and more.

Initial revision