Simon Cruanes
57a160c054
Merge a56dd0ec65 into ba19880d75
2026-02-12 01:55:04 +08:00
Simon Cruanes
ba19880d75
hardening bugfixes
...
github pages / deploy (push) Has been cancelled
build / build (4.13.x, ubuntu-latest) (push) Has been cancelled
build / build (4.14.x, ubuntu-latest) (push) Has been cancelled
build / build (5.03.x, ubuntu-latest) (push) Has been cancelled
* fix: use realpath to validate filesystem paths against traversal
- add string_prefix helper to check path containment
- compute root_canonical once per add_vfs_ call
- use realpath only for filesystem (on_fs=true), keeping simple
contains_dot_dot check for VFS
- paths are already URL-decoded by Route.rest_of_path_urlencoded
* fix: add header size limits to prevent memory exhaustion
add optional limits to Headers.parse_:
- max_headers: 100 (default)
- max_header_size: 16KiB per header (default)
- max_total_size: 256KiB total (default)
returns 431 status code when limits exceeded per RFC 6585.
2026-02-10 19:57:21 -05:00
Simon Cruanes
cdac33689a
add basic test for response
2025-04-18 09:37:27 -04:00
Simon Cruanes
4c8cc8ba5a
test: update test
2025-04-18 09:37:27 -04:00
Simon Cruanes
3c9e505a45
fix test
2025-04-18 09:37:27 -04:00
Simon Cruanes
09ff4f98ed
fix percent encoding for < 0x10 chars
2024-12-25 11:12:42 -05:00
Simon Cruanes
21c0f7f25d
feat: require \r\n before all boundaries but the first
2024-12-02 15:58:16 -05:00
Simon Cruanes
099777b593
test
2024-12-02 15:49:08 -05:00
Simon Cruanes
ce6119d456
and tests
2024-12-02 14:56:45 -05:00
Simon Cruanes
66f87b7bda
more tests
2024-12-02 14:45:41 -05:00
Simon Cruanes
3f37161649
test: more tests for multipart form data
2024-12-02 14:19:40 -05:00
Simon Cruanes
bde09435b4
more test
2024-12-02 11:48:33 -05:00
Simon Cruanes
2968031e5b
wip: multipart
2024-12-02 11:46:40 -05:00
Simon Cruanes
cf9c14b1c2
basic test for moonpool-io
2024-09-03 15:17:25 -04:00
Simon Cruanes
de9760d786
format
2024-08-15 09:18:15 -04:00
Simon Cruanes
f720a01ed8
fix this damn non determinism test
2024-06-20 11:07:44 -04:00
Simon Cruanes
ee637c7c81
fix test
2024-06-20 09:28:13 -04:00
Simon Cruanes
4705278c3b
add more tests
2024-06-18 17:04:15 -04:00
Simon Cruanes
b6cd59f084
add tests
2024-06-18 16:47:25 -04:00
Simon Cruanes
9329c95ce7
test: update unit tests for websockets
2024-04-05 13:23:10 -04:00
Simon Cruanes
00b6efdcd5
fix warning in tests
2024-04-04 16:27:11 -04:00
Simon Cruanes
c795ebb809
update test output
2024-04-04 15:59:04 -04:00
Simon Cruanes
2eba43e632
test: add websocket masking tests
2024-04-04 15:54:55 -04:00
Simon Cruanes
0014334010
update tests, make them more robust
2024-04-03 21:44:24 -04:00
Simon Cruanes
3a1a884186
update tests to add repro for #83
2024-03-25 10:15:13 -04:00
Simon Cruanes
7e790c0161
fix: parse query when there's a fragment indication
2024-02-28 15:01:13 -05:00
Simon Cruanes
6cfd1975d1
details for logs
2024-02-26 22:54:45 -05:00
Simon Cruanes
ec3dec6b72
wip: bugfixes
2024-02-26 16:28:31 -05:00
Simon Cruanes
68c82692e1
fix
2024-01-18 22:11:35 -05:00
Simon Cruanes
c19b8dc16f
add histograms to prometheus
2024-01-18 22:05:23 -05:00
Simon Cruanes
9f9017f26a
add prometheus middleware for httpd
2024-01-18 21:25:49 -05:00
Simon Cruanes
da7a27552a
wip: tests for prometheus
2024-01-18 21:12:18 -05:00
Stéphane Lavergne
03596c1a08
Remove option around client_addr
2023-08-08 15:18:39 -04:00
Simon Cruanes
572168967f
remove last qtest
2023-08-08 14:41:58 -04:00
Simon Cruanes
009a8d6d3b
test: tests for Buf
2023-06-20 23:03:31 -04:00
Simon Cruanes
c2b6ac24f4
fix: unit tests are for tiny_httpd
2023-05-24 16:14:13 -04:00
Simon Cruanes
82ebf85ee7
remove dep on ounit2 and qtest
2023-05-24 15:13:27 -04:00
Simon Cruanes
0908d71e19
ocamlformat
2023-05-23 17:40:18 -04:00
Christophe Raffalli
a5cf4060f3
Update download_chunked.sh
...
There was a type: Tranfer instead of Transfer and anyway we want Accept. But Accept-encoding is not looked at for chunked.
2023-02-07 16:15:08 -10:00
Simon Cruanes
5aa29fb8b5
test: fix expect tests, make them more robust (timeout), correct upload test
2022-03-31 08:45:39 -04:00
Simon Cruanes
dbb384cd82
fix: do not try to download a URL from vfs-pack in test
2022-03-30 16:31:18 -04:00
Simon Cruanes
a4438dbdf6
fix a test for 4.04
2022-03-30 16:23:40 -04:00
Simon Cruanes
4aba0654b0
change api for Html.nary'; better newlines in output
2022-03-18 21:32:11 -04:00
Simon Cruanes
030d71ad72
update test
2022-03-17 23:23:59 -04:00
Simon Cruanes
6706589c62
increase test coverage to include vfs and <pre>
2022-03-17 22:35:13 -04:00
Simon Cruanes
46cb25e5b8
exercize if_ in a test
2022-03-16 22:38:46 -04:00
Simon Cruanes
5c1a7310ee
add regression test for html
2022-03-16 22:27:30 -04:00
Simon Cruanes
4aade13cec
fix tests on non-linux
2022-01-05 08:42:29 -05:00
Simon Cruanes
111e2da3ad
fix test -_-
2022-01-04 09:51:11 -05:00
Simon Cruanes
5b00189e14
use separate ports
2022-01-04 00:31:14 -05:00