add ability to handle combined content-length header.
amended get_combined_value.
support parsing quoted string.
Avoid using regular expressions
Removed export_all
Merge pull request #88 from doubleyou/handling-combined-header

Handling combined header
Fix for mochiweb_acceptor crash under R15B02

The source is still unclear but R15B02 now will return and emsgsize error
if the received packet is larger than the recvbuf.  This can be tested with
the following (sorry I don't know how to integrate this sort of test into
mochiweb's tests).

-module(mochi_test).

-export([start/0,
         handle_http/1,
         test/1]).

start() ->
  application:start (inets),
  mochiweb_http:start([{port, 5678}, {loop, fun(Req) -> handle_http(Req) end}]).

handle_http(Req) ->
  Req:respond({ 200,
                [ {"Content-Type", "text/html"} ],
                [ "<html><body>Hello</body></html>" ]
              }).

test (Len) ->
  httpc:request (get, {"http://127.0.0.1:5678/",
                 [{"X-Random", [$a || _ <- lists:seq(1,Len)]}]}, [], []).

Once compiled you can run this with

erl -pa ebin -boot start_sasl

Then run with

mochi_test:start().
mochi_test:test(10000).

The result is different with R14B04 and R15B02.  With R15B02 there was
a crash in the mochiweb_acceptor.  This patch deals with that crash.
Do not allow backslashes in path (security).

On Windows, it is possible to access arbitrary files by crafting
a GET with unescaped \, like GET /..\..\..\..\..\windows\win.ini

http://www.couchbase.com/issues/browse/MB-7390
Issue 92: Do not allow backslashes in path (security).

On Windows, it is possible to access arbitrary files by crafting
a GET with unescaped \, like GET /..\..\..\..\..\windows\win.ini

Please also see ouchbase.com/issues/browse/MB-7390
Merge branch 'master' of git://github.com/melkote/mochiweb
Merge pull request #93 from melkote/master

Pull request for issue 92: Do not allow backslashes in path (windows security).
Merge pull request #91 from djnym/R15B02_mochiweb_acceptor_crash

Fix for mochiweb_acceptor crash under R15B02
prep changelog for 2.4.0
Added session module for use of secure cookies
Added some tests. still getting errors though
Trying new encoding ways
Mochiweb session it's functional now
Working on Dymitri
Still workin on Dymitri's suggestions
There is only one place to put user or any kind of data now. I don't really understan the security implications of this. There is no term_to_binary in the code now.