- update apache to 1.3.36
- bump HARD_SERVER_LIMIT to 2048
- drop broken WITH*_EXPAT support.
we always depend on expat from ports (based on [1])
PR: ports/81183 [1]
Submitted by: Martin Nilsson <martin@svenskabutiker.se>
SECURITY: CVE-2005-3352 (cve.mitre.org)
mod_imap: Escape untrusted referer header before outputting in HTML
to avoid potential cross-site scripting. Change also made to
ap_escape_html so we escape quotes. Reported by JPCERT.
[Mark Cox]
Reported by: simon