6 commits

Author	SHA1	Message	Date
Simon Cruanes	ba19880d75	hardening bugfixes ... * fix: use realpath to validate filesystem paths against traversal - add string_prefix helper to check path containment - compute root_canonical once per add_vfs_ call - use realpath only for filesystem (on_fs=true), keeping simple contains_dot_dot check for VFS - paths are already URL-decoded by Route.rest_of_path_urlencoded * fix: add header size limits to prevent memory exhaustion add optional limits to Headers.parse_: - max_headers: 100 (default) - max_header_size: 16KiB per header (default) - max_total_size: 256KiB total (default) returns 431 status code when limits exceeded per RFC 6585.	2026-02-10 19:57:21 -05:00
Simon Cruanes	d8ff243e8d	feat ws: pass the whole request to the handler	2024-04-02 14:35:57 -04:00
Simon Cruanes	ec3dec6b72	wip: bugfixes	2024-02-26 16:28:31 -05:00
Simon Cruanes	29dc16114e	detail in example	2024-02-05 01:07:34 -05:00
Simon Cruanes	a405fb046d	expose client address to websocket	2024-02-05 01:07:34 -05:00
Simon Cruanes	7fe66a21ec	example of echo server over websockets	2024-02-05 01:06:37 -05:00