yhirose
|
fd0c18b1b5
Validate connecting peer before honoring X-Forwarded-For
|
2 週間 前 |
yhirose
|
bbd56a7e2c
Merge pull request #2497 from superm1/superm1/SWSPLAT-23636
|
2 週間 前 |
yhirose
|
54b3c1d072
Add Mbed TLS 4.x support (PSA Crypto) (#2502)
|
2 週間 前 |
metsw24-max
|
6c4cbd49a2
scan X-Forwarded-For right-to-left in get_client_ip (#2503)
|
2 週間 前 |
Emre Ay
|
f3e9a4d887
Skip request body drain when connection will close
|
3 週間 前 |
Mario Limonciello
|
877a52f6b3
Limit the number of header lines per multipart form-data part
|
3 週間 前 |
yhirose
|
3adc525cec
Use detail::from_chars for out-of-range Content-Length check
|
3 週間 前 |
Sayed Kaif
|
a415362dff
update OpenStreamMalformedContentLength.OutOfRange for stricter parsing
|
4 週間 前 |
Sayed Kaif
|
982235c0a9
flag out-of-range Content-Length in get_header_value_u64
|
4 週間 前 |
yhirose
|
255c075b82
Reject CR/LF in the request target and fail the request cleanly (#2501)
|
3 週間 前 |
yhirose
|
75938f08c7
Match chunked as the final transfer coding, order-independently (#2500)
|
3 週間 前 |
yhirose
|
0c1cc8c986
Strip Cookie headers on cross-origin redirect
|
4 週間 前 |
yhirose
|
2f986fd5e5
Fix use-after-free of TLS session in WebSocketClient::shutdown_and_close()
|
4 週間 前 |
yhirose
|
06b8b91589
Fix Response::content_length_ not reflecting body size in Logger (Fix #2488)
|
4 週間 前 |
yhirose
|
873d701972
Fix use-after-free in SSLClient destructor with mbedTLS (Fix #2492)
|
4 週間 前 |
yhirose
|
568d434e72
Fix CRLF injection in chunked response trailers
|
1 ヶ月 前 |
Copilot
|
32abac3de5
Fix ambiguous Get() examples in README after new Params overload (#2486)
|
1 ヶ月 前 |
yhirose
|
a4d7066c2c
Log res.error() in GetWithRange test assertions to diagnose flaky CI failures
|
1 ヶ月 前 |
yhirose
|
bd455f8b91
Add locale-independent ASCII classification helpers (Fix #2482, Fix #2483)
|
1 ヶ月 前 |
yhirose
|
32ff75e355
Make ThreadPool idle timeout configurable at runtime (Fix #2481)
|
1 ヶ月 前 |
yhirose
|
45da614ddd
Omit default port from WebSocket handshake Host header (Fix #2480)
|
1 ヶ月 前 |
yhirose
|
f5c8c982df
Escape CR and LF in multipart part content types
|
1 ヶ月 前 |
yhirose
|
9e8b960e44
Add public MultipartFormDataWriter for multipart body serialization
|
1 ヶ月 前 |
yhirose
|
8149bb38fc
Escape quote, CR and LF in multipart field names and filenames
|
1 ヶ月 前 |
Saber Haj Rabiee
|
3fe32b63b4
Send query string verbatim when path encoding is disabled (#2479)
|
1 ヶ月 前 |
metsw24-max
|
a7b886b9cb
Use an unsigned accumulator in base64_encode (#2477)
|
1 ヶ月 前 |
yhirose
|
ba390f2399
Restrict IP-host hostname verification to iPAddress SANs on Mbed TLS and wolfSSL
|
1 ヶ月 前 |
yhirose
|
7307c41aa8
Better `from_chars` implementation (Fix #2475)
|
1 ヶ月 前 |
metsw24-max
|
28d95937b5
use strict hex parsing in decode_query_component (#2472)
|
1 ヶ月 前 |
yhirose
|
fa981cedae
Fix TLS chain verification bypass for IP hosts on Mbed TLS and wolfSSL
|
2 ヶ月 前 |