couchdb:fix-rexi-mon-links

Last commit made on 2023-12-14
Get this branch:
git clone -b fix-rexi-mon-links https://git.launchpad.net/couchdb

Branch merges

Branch information

Name:
fix-rexi-mon-links
Repository:
lp:couchdb

Recent commits

732cc75... by Russell Branca <email address hidden>

Error on unexpected rexi_call messages

c0d77ad... by Nick V.

Publish CVE-2023-45725

e551cac... by Robert Newson <email address hidden>

Merge pull request #4910 from apache/couch_passwords_very_return_false

couch_passwords:verify should always return false for bad inputs

876fa87... by Robert Newson <email address hidden>

couch_passwords:verify should always return false for bad inputs

0eca498... by Jay Doane <email address hidden>

Remove support for delete markers

Currently, `config:reload()` ignores so-called "delete markers" [1],
denoted by a a key and equal sign, but no value on the right hand
side, e.g.

```ini
key =
```

However, when the `config` application starts, and it parses the
`.ini` files in order, it deletes any existing value from the `ets`
table with that key when it encounters a delete marker. This has the
effect of *overriding* any defaults with `undefined`, which some
people find surprising. [2]

Luckily, the origin of delete markers is not lost to time, and the
original developer has admitted they were essentially a work-around
[3] for not having a proper `.ini` file parser.

This change removes support for delete markers. A persistent call to
`config:delete` no longer writes a delete marker, but instead deletes
the entire line. When parsing `.ini` files, any existing delete
markers are ignored.

Additionally, this change improves consistency after `config:delete`
by loading any values from `.ini` files into the `ets` table
subsequent to the deletion.

[1] https://github.com/apache/couchdb/issues/4892
[2] https://github.com/apache/couchdb/issues/1624
[3] https://couchdb.slack.com/archives/C01TBE2J197/p1701718345541559?thread_ts=1701712487.990349&cid=C01TBE2J197

4e2981c... by Jay Doane <email address hidden>

Simplify logging of sensitive config values

Eliminate repetitive code via introduction of `maybe_conceal/2`.

125b3b7... by Jay Doane <email address hidden>

Clean up config

- Remove unused config field, export, include, defines

- Delete confusing test config delete reason

  The third argument to `config:delete/3`, if not a boolean, should be a
reason for the deletion. This "8080" that looks like a port number was
presumably a copy-pasta error.

- Ensure these config tests get executed

  Unwrap tests from unnecessary `?_test(begin ... end)` so that they
actually execute their assertions.

4e0b66a... by Robert Newson <email address hidden>

Merge pull request #4905 from apache/nouveau-auth

Reject requests with user-agent header

a4ede7b... by Robert Newson <email address hidden>

Reject requests with user-agent header

A light mechanism to block unwanted requests from a browser,
which will always send a User-Agent header of some value.

ce27697... by Jay Doane <email address hidden>

Git ignore all `.hypothesis` directories

A `.hypothesis` directory was observed at the top level of the repo,
so ignore them wherever they might be.