Skip site navigation (1)Skip section navigation (2) 
Date:      Tue, 19 May 2026 17:19:40 +0000
From:      Sergey A. Osokin <osa@FreeBSD.org>
To:        ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org
Subject:   git: 4f3c97a3ffa7 - main - www/freenginx-devel: update njs 0.9.8 -> 0.9.9 (+)
Message-ID:  <6a0c9bac.1e0e3.750a41ce@gitrepo.freebsd.org>
index | next in thread | raw e-mail 

The branch main has been updated by osa:

URL: https://cgit.FreeBSD.org/ports/commit/?id=4f3c97a3ffa7d6fa672cbb2a8c60afffc465c792

commit 4f3c97a3ffa7d6fa672cbb2a8c60afffc465c792
Author:     Sergey A. Osokin <osa@FreeBSD.org>
AuthorDate: 2026-05-19 17:19:03 +0000
Commit:     Sergey A. Osokin <osa@FreeBSD.org>
CommitDate: 2026-05-19 17:19:03 +0000

    www/freenginx-devel: update njs 0.9.8 -> 0.9.9 (+)
    
    Bump PORTREVISION.
    
    <ChangeLog>
    
    nginx modules:
    
    *) Security: a heap buffer overflow might occur in a worker process
       when the "js_fetch_proxy" directive value contains nginx
       variables derived from the client request ($http_*, $arg_*,
       $cookie_*, etc.) and the location's JS handler invokes
       ngx.fetch(). The issue was introduced in dea83189 (0.9.4).
    
    *) Feature: added js_access directive.
    
    *) Feature: added r.readRequestText(), r.readRequestArrayBuffer(),
       and r.readRequestJSON() - async methods that read the request
       body, available in js_access and js_content directives.
    
    *) Feature: added r.readRequestForm() - async method that parses
       the request body submitted from an HTML form
       (application/x-www-form-urlencoded and multipart/form-data) and
       returns a structured accessor object.  The method is available
       in js_access and js_content directives.
    
    *) Feature: added jsVarNames() method.  The method returns the
       names of variables declared with js_var.
    
    Core:
    
    *) Bugfix: fixed evaluation order of call arguments with side
       effects.  Previously, an earlier argument could observe a later
       argument's mutation, e.g. f(a, a = 2) passed 2 as both
       arguments.
       The issue was introduced in fd5e523f (0.9.7).
    
    </ChangeLog>
---
 www/freenginx-devel/Makefile        | 1 +
 www/freenginx-devel/Makefile.extmod | 2 +-
 www/freenginx-devel/distinfo        | 6 +++---
 3 files changed, 5 insertions(+), 4 deletions(-)

diff --git a/www/freenginx-devel/Makefile b/www/freenginx-devel/Makefile
index cf5899fd2a6b..583e83f386b6 100644
--- a/www/freenginx-devel/Makefile
+++ b/www/freenginx-devel/Makefile
@@ -1,6 +1,7 @@
 PORTNAME=	freenginx
 PORTVERSION=	${NGINX_VERSION}
 .include "version.mk"
+PORTREVISION=	2
 CATEGORIES=	www
 MASTER_SITES=	https://freenginx.org/download/ \
 		LOCAL/osa
diff --git a/www/freenginx-devel/Makefile.extmod b/www/freenginx-devel/Makefile.extmod
index 711f25ae9d68..f5deff75bca6 100644
--- a/www/freenginx-devel/Makefile.extmod
+++ b/www/freenginx-devel/Makefile.extmod
@@ -237,7 +237,7 @@ NAXSI_EXTRA_PATCHES=	${PATCHDIR}/extra-patch-naxsi-libinjection__sqli_c \
 			${PATCHDIR}/extra-patch-naxsi_config
 NAXSI_VARS=		DSO_EXTMODS+=naxsi NAXSI_SUBDIR=/naxsi_src
 
-NJS_GH_TUPLE=		nginx:njs:0.9.8:njs
+NJS_GH_TUPLE=		nginx:njs:0.9.9:njs
 NJS_CFLAGS=		-I ${LOCALBASE}/include/quickjs
 NJS_CONFIGURE_ARGS=	--cc-opt="${CFLAGS}" --ld-opt="${LDFLAGS}" --with-quickjs
 NJS_IMPLIES=		HTTP STREAM
diff --git a/www/freenginx-devel/distinfo b/www/freenginx-devel/distinfo
index 66198c3f2b7f..3f1153cc1f25 100644
--- a/www/freenginx-devel/distinfo
+++ b/www/freenginx-devel/distinfo
@@ -1,4 +1,4 @@
-TIMESTAMP = 1778260334
+TIMESTAMP = 1779206819
 SHA256 (freenginx-1.31.0.tar.gz) = 94e3f108730c7a37874aceb6f63046390bc995da94dcc6a3b730909089dbac04
 SIZE (freenginx-1.31.0.tar.gz) = 1252995
 SHA256 (nginx_mogilefs_module-1.0.4.tar.gz) = 7ac230d30907f013dff8d435a118619ea6168aa3714dba62c6962d350c6295ae
@@ -109,8 +109,8 @@ SHA256 (wargio-naxsi-1.7_GH0.tar.gz) = adee817da71913f64a9fb0fca142d9520bb0e5014
 SIZE (wargio-naxsi-1.7_GH0.tar.gz) = 1132392
 SHA256 (libinjection-libinjection-b9fcaaf_GH0.tar.gz) = 7812e1316b61a7a7d3a65a57a07c6d5235ac40fe35e6edda983f31a44661a38e
 SIZE (libinjection-libinjection-b9fcaaf_GH0.tar.gz) = 2218207
-SHA256 (nginx-njs-0.9.8_GH0.tar.gz) = 016cea70b70f0abcf894366bd555e34ea839b920fac1b085fb063a2ecccc8672
-SIZE (nginx-njs-0.9.8_GH0.tar.gz) = 967795
+SHA256 (nginx-njs-0.9.9_GH0.tar.gz) = a07f4cf0a2076bbabde23cab48aea68641ebf5d54ea69b415ce70a8da4153843
+SIZE (nginx-njs-0.9.9_GH0.tar.gz) = 994273
 SHA256 (osokin-nginx-otel-51273ec_GH0.tar.gz) = a2107ba0be94c8561ae50773163c7946a58e508be46920f588d05a347c867d9c
 SIZE (osokin-nginx-otel-51273ec_GH0.tar.gz) = 28076
 SHA256 (konstruxi-ngx_postgres-8aa7359_GH0.tar.gz) = c69ad4495de7c7883ebc23e1e6c4cc83a4ac6a7fddd4d5c12e49d33b65f7c50b
home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?6a0c9bac.1e0e3.750a41ce>