3 Fix ACCEPTOR-REMOVE-SESSION default implementation (Stas Boukarev, Mathieu Lemoine)
7 Prevent errors when basic auth user or password contains colon
8 Add missing implementation for client-as-string for Lispworks, contributed by Raymond Wiker
12 New START-THREAD API function (Faré Rideau)
16 Fix bug that caused error when requesting nonexistent page.
20 Fix race condition in acceptor shutdown (Faré Rideau)
24 Call ACCEPTOR-STATUS-MESSAGE in a saner and more useful fashion (sponsored by Ron Garret)
28 fix wrong documented signature in acceptor-status-message (reported by Zach Beane)
32 Various documentation updates
33 Fix bug in static file handling that caused Safari to hang on 304 responses by Hunchentoot (reported by Wim Oudshoorn)
37 Fix bug in MD5-HEX that could cause session keys to be reused
41 Add local-addr* and local-port* functions
45 Fix test script to accomodate for Drakma fix regarding redirect from POST to GET
46 Fix range handling once again
50 ECL fixes (Juan Jose Giarcia-Ripoll)
54 Fix documentation for COOKIE-IN, which returns a string, not a cookie.
55 Hunchentoot could not deal with / pointing to a static file directory (Stas Boukarev).
56 Fixes to pathname sanitizing when handling static files.
57 Further Range: header handling fixes
58 Fix some export names relating to taskmaster thread count (Faré Rideau)
62 Doc fixes, add .pre-release.sh script
66 High-load multithread stability fixes (Mathieu Lemoine)
70 Remove dead code & style fixes (Ala'a Mohammad)
71 Bug fix: setting *print-base* / *print-radix* caused invalid cookie values (Scott L. Burson)
72 Various documentation and style updates
73 Fix documentation bug found (Mathieu Lemoine)
74 Fix bug that could hang Hunchentoot under load (Mathieu Lemoine)
78 Fix crash when error occurs while logging error (reported by Xu Jingtao)
79 Fix compilation with :hunchentoot-no-ssl feature (Mark Evenson)
80 Fix Range header handling (Simon Sandlund)
81 Export acceptor-remove-session
82 ECL timeout support (Juan Jose Giarcia-Ripoll)
83 Changed cookie handling - Hunchentoot no longer encodes cookies
84 automatically. Applications must make sure that they only set cookies
85 to permitted values (refer to RFC6265 for the details, thanks to Ralf
86 Stoye for debugging help)
90 Fix warning on LispWorks (Nico de Jager)
92 Remove obsolete symbols from export list
94 Document acceptor-remove-session, remove obsolete *session-removal-hook* export (Issue #15)
95 Added :description to asdf system definition
96 Add documentation section describing how to bind to privileged ports
100 Use FINISH-OUTPUT instead of FORCE-OUTPUT at connection end (I. Perminov)
101 Documentation updates
102 External format EOL style fixes for Windows (Anton Kovalenko)
106 Fix to allow send-service-unavailable-reply to work (Faré Rideau)
107 Make sure we always have a cooked message to send in case of error (Faré Rideau)
108 Add www/ directory with default file tree that is being served
109 Add error template mechanism and improve error reporting in general.
110 Improve automatic testing, SBCL kludge to support asdf:test-op
111 Allegro CL modern mode fixes
112 Fix bugs in serving partial responses
113 Limit maximum number of threads that Hunchentoot creates (Dan Weinreb, Scott McKay)
114 Export fixes (Gordon Sims, Andrey Moskvitin, Faré Rideau)
115 Factor out easy-handler logic into separate acceptor subclass
116 Export two session functions (Nico de Jager)
117 Allow no Content-Type header (Chaitanya Gupta)
118 Patch for compilation with ECL (Sohail Somani)
119 Fix DEFINE-EASY-HANDLER for multiple acceptors (Nicolas Neuss)
120 Revived *SHOW-LISP-BACKTRACES-P*
121 Made sure "100 Continue" is returned even if the client sends "Expect: 100-continue" twice (reported by Gordon Sims)
122 Fixed typo in code which interprets transfer encodings
126 Exported WITHIN-REQUEST-P (Faré Rideau)
127 Safeguard measures against XSS attacks (J.P. Larocque)
128 Prevent potential leak when closing stream (Matt Lamari, Martin Simmons)
129 Change some occurrences of HANDLER-CASE* to HANDLER-CASE (Hans Hübner, Allan Dee)
133 Architectural changes - see HANDLE-REQUEST (thanks to Andreas Fuchs and Frode Fjeld)
134 Re-introduced *CATCH-ERRORS-P* and MAYBE-INVOKE-DEBUGGER
135 Integration with trivial-backtrace (see *LOG-LISP-BACKTRACES-P*)
136 Treat :UNSPECIFIC like NIL in pathname components (reported by Frode Fjeld)
138 Prepared for LispWorks 6 (Nico de Jager)
139 Fixed reading of post parameters (Peter Seibel and Stephen P. Compall)
140 Fixed STOP by supplying the :READY-ONLY keyword to USOCKET:WAIT-FOR-INPUT
141 Enabled SSL key passwords for Lisps other than LW (Vsevolod)
145 Complete architectural redesign (together with Hans Hübner)
146 Lots of small fixes and improvements, too many to enumerate here
150 Fixed embarrassingly mis-placed parentheses (thanks to Hans Hübner)
154 Removed FORCE-OUTPUT* and thus the ACL-COMPAT dependency (thanks to Hans Hübner)
155 Support for MP-less CMUCL (thanks to Hans Hübner)
159 Fixed unportable LOOP usage (caught by "C S S")
163 Added CODE parameter to REDIRECT (thanks to Michael Weber)
167 Fixed typo in test.lisp (thanks to Ben Hyde)
168 Changed wrong usage of EQ to EQL (thanks to Ariel Badichi)
169 Fixed typo in default handler (thanks to Eugene Ossintsev)
173 Uses CL-FAD for HANDLE-STATIC-FILE now
174 Better error reporting for CREATE-FOLDER-DISPATCHER-AND-HANDLER (suggested by Cyrus Harmon)
175 Faster version of WRITE-HEADER-LINE (thanks to V. Segu�)
179 Added support for CLISP (thanks to Anton Vodonosov)
183 Replace ENOUGH-NAMESTRING with ENOUGH-URL (patch by Kilian Sprotte and Hans Hübner)
187 Fix compilation order (thanks to Tiarnan O'Corrain and Chris Dean)
191 Robustified MAKE-SOCKET-STREAM against potential leak (thanks to Alain Picard)
192 Replaced #-FOO #-FOO constructs for OpenMCL (patch by Michael Weber)
193 Updated tutorial links
197 Made log stream shared on OpenMCL (thanks to Gary Byers)
201 Enabled GET-GID-FROM-NAME for newer versions of SBCL (patch by Cyrus Harmon)
205 Better handling of PORT parameter in REDIRECT (thanks to Vladimir Sedach)
209 Fixed bug where you couldn't set "Server" header (caught by Ralf Mattes)
210 Documentation clarification for HEADER-OUT function
214 Added support for "HttpOnly" cookie attribute
218 Added *METHODS-FOR-POST-PARAMETERS* (suggested by Jonathon McKitrick)
222 Better support for WITH-TIMEOUT on SBCL/Win32 (thanks to Anton Vodonosov)
226 Now uses bound for flexi stream returned by RAW-POST-DATA
227 Needs FLEXI-STREAMS 0.12.0 or higher
232 Added declaration in server.lisp to appease SBCL
236 Fixes for OpenMCL (thanks to Lennart Staflin and Tiarnan O'Corrain)
240 Added server names and coupled them with easy handlers (suggested by Mac Chan)
241 Exported SESSION-COOKIE-VALUE instead of SESSION-STRING (suggested by Slava Akhmechet)
242 Documentation fixes (thanks to Victor Kryukov and Igor Plekhov)
246 Made MAYBE-INVOKE-DEBUGGER a generic function and exported it (suggested by Vladimir Sedach)
250 Fixed CREATE-FOLDER-DISPATCHER-AND-HANDLER in the presence of URL-encoded URLs (bug caught by Nicolas Lamirault)
254 Made DEF-HTTP-RETURN-CODE more flexible (suggested by Jong-won Choi)
258 Added PORT parameter to REDIRECT (suggested by Cyrus Harmon)
259 Exported REMOVE-SESSION (suggested by Vamsee Kanakala)
263 Added socket timeouts for AllegroCL
264 Catch IO timeout conditions for AllegroCL, SBCL and CMUCL (suggested by Red Daly and others)
265 Added per-server dispatch tables (suggested by Robert Synnott and Andrei Stebakov)
269 USE the CL package explicitly when defining HUNCHENTOOT-MP (bug report by Joel Boehland)
273 Correct behaviour for "100 Continue" responses
281 Don't use chunked encoding for empty (NIL) bodies
285 Really exported REASON-PHRASE this time (and also *CURRENT-PROCESS*)
289 Added HUNCHENTOOT-MP package (suggested by Cyrus Harmon)
290 Only invoke MARK-AND-SWEEP for 32-bit versions of LW (thanks to Chris Dean)
291 Exported REASON-PHRASE
295 Added *APPROVED-RETURN-CODES*, *HEADER-STREAM*, and +HTTP-FAILED-DEPENDENCY+
296 Exported MIME-TYPE and SSL-P
301 Added +HTTP-MULTI-STATUS+
305 Fix test suite to properly handle non-base characters in LW (bug caught by Jong-won Choi)
309 Fixed last change (thanks to Marko Kocic)
313 Development port (no threads) to SBCL/Win32 (patch by Marko Kocic)
314 Support for compilation without SSL
318 Don't use NSTRING-UPCASE for outgoing headers (bug caught by Saurabh Nanda)
319 Changed ProxyPass example in docs from /lisp to /hunchentoot
323 Reset to "faithful" external format on each iteration (bug caught by Viljo Marrandi and Ury Marshak)
327 Accept chunked transfer encoding for mod_lisp request bodies (thanks to Hugh Winkler's mod_lisp additions)
328 Robustify against erroneous form-data submissions (caught by Ury Marshak)
332 Even more flexible behaviour of RAW-POST-DATA
336 More flexible behaviour of RAW-POST-DATA
337 Robustified PARSE-CONTENT-TYPE
341 More meaningful results for RAW-POST-DATA
345 Added favicon.ico to example website (thanks to Yoni Rabkin Katzenell, Toby, and Uwe von Loh)
349 Added Hunchentoot logo by Uwe von Loh
353 Exported symbols related to session GC (suggested by Nico de Jager)
357 Added *HANDLE-HTTP-ERRORS-P* (thanks to Marijn Haverbeke)
358 Remove duplicate headers when reading from mod_lisp
362 Fixed HEADER-OUT (thanks to Robert J. Macomber)
366 Fixed bug in START-OUTPUT which confused mod_lisp
370 Changed behaviour of REAL-REMOTE-ADDR (as suggested by Robert J. Macomber)
371 Fixed COOKIE-OUT (thanks to Robert J. Macomber)
375 Don't bind *DISPATCH-TABLE* too early (thanks to Marijn Haverbeke)
379 Fixed bug in AUTHORIZATION function (reported by Michael J. Forster)
383 Correct SSL check in REDIRECT function
384 LOG-MESSAGE now checks for (BOUNDP '*SERVER*)
388 OpenMCL fixes (by Ralf Stoye)
392 No timeouts for mod_lisp servers (as in Hunchentoot 0.3.x)
396 Fixed a typo in easy-handlers.lisp (caught by Travis Cross)
400 Ported to CMUCL, SBCL, OpenMCL, and AllegroCL
402 Tons of small changes, too many to list them individually
406 Uses TBNL's WITH-DEBUGGER now
410 Added *CATCH-ERRORS-P* (from TBNL)
414 Accept HTTP requests with chunked transfer encoding
415 Use Chunga for chunking
419 Skip START-OUTPUT advice completely if working for TBNL
423 Added write timeouts for LW 5.0
424 Updated LW links in documentation
428 Serves as infrastructure for TBNL now (to replace KMRCL)
429 For HTTP/1.1 only send 'Keep-Alive' headers if explicitly requested
433 Connection headers are separated by commas, not semicolons
437 Refactored streams.lisp to appease LW compiler (thanks to Martin Simmons)
438 Changed handling of version string
439 Changed package handling in system definition (thanks to Christophe Rhodes)
443 Removed KMRCL workaround
447 Mention TBNL version number in server name header
451 Fixed package stuff and HYPERDOC support
455 Initial public release
457 [For earlier changes see the file "CHANGELOG_TBNL" that is included with the release.]