Module performs both regular expression and fixed string substitutions
on response bodies. This module is quite different from the native
substitution module. It scans the output chains buffer and matches string
line by line, just like Apache's mod_substitute.
===> The following configuration options are available for angie-module-subs-1.12.2:
DEBUG=on: Include debug version
===> Use 'make config' to modify these settings
www/angie: Update 1.11.2 => 1.11.3 (fix CVE-2026-1642, possible MITM attack)
Security: An attacker in a man-in-the-middle (MITM) position before a
proxied server using TLS, given conditions beyond the attacker's
control, could inject plaintext data into the response before the TLS
handshake begins (CVE-2026-1642); the fix was ported from nginx 1.29.5.
Changelog:
https://en.angie.software/angie/docs/oss_changes/#angie-1-11-3
- Bump PORTREVISION in www/angie-module-*.
- Fix using of ANGIE_PORTREVISION in RUN_DEPENDS for modules.
- Replace INSTALL_MAN with INSTALL_DATA for documentation.
- Unroll "for" loops with 1-2 items - simplify Makefile and call
"INSTALL_*" 1 time instead of several.
PR: 293034
Security: CVE-2026-1642
MFH: 2026Q1
www/angie: Use upstream version numbers for modules
Angie modules currently inherit the version number of the angie version
they are built against. This makes it hard and opaque to track their
actual version.
The mechanism used in the Makefile also had the unwanted side-effect of
PORTREVISION propagating from modules to the master port, which broke
the build (we found out the hard way...)
While here reduce number of of MKDIR calls.
PR: 291490
Co-authored-by: Vladimir Druzenko <vvd@FreeBSD.org>
www/angie-module-subs: Angie substitutions filter dynamic module
Module performs both regular expression and fixed string substitutions
on response bodies. This module is quite different from the native
substitution module. It scans the output chains buffer and matches string
line by line, just like Apache's mod_substitute.
PR: 273462
