d00f 18b28edcbb httpd: keep a continued upload away from the cmd and login handlers ...

handle_post() takes the request path from byte 6 of the segment it is
given. For the first segment of a POST that is the path, but for a later
segment of a multipart upload it is whatever part of the file happens to
sit there. The cmd and login handlers were matched before the multipart
state was checked, so a segment of a config or firmware upload with
"cmd " at that offset ran the rest of the segment as CLI commands, and
one with "login " there aborted the upload with 400.

Check for an upload in progress, and for new upload and config requests,
before looking at cmd and login. A new POST cannot match both sets of
words, so nothing changes for requests that are not uploads.

2026-09-15 09:57:49 +02:00

..

httpd.c

httpd: keep a continued upload away from the cmd and login handlers

2026-09-15 09:57:49 +02:00

httpd.h

Add caching and usage of MIME-type enums

2025-08-20 10:11:31 +02:00

page_impl.c

stp: treat a link aggregation group as one entity

2026-09-09 20:58:35 +02:00

page_impl.h

httpd: answer /cmd with the shared text header

2026-09-03 22:18:45 +02:00

treatasm.py

http: use python3.

2025-08-27 23:11:12 +02:00