mirror of
https://github.com/c-cube/tiny_httpd.git
synced 2026-03-07 21:37:57 -05:00
ba19880d75
* fix: use realpath to validate filesystem paths against traversal - add string_prefix helper to check path containment - compute root_canonical once per add_vfs_ call - use realpath only for filesystem (on_fs=true), keeping simple contains_dot_dot check for VFS - paths are already URL-decoded by Route.rest_of_path_urlencoded * fix: add header size limits to prevent memory exhaustion add optional limits to Headers.parse_: - max_headers: 100 (default) - max_header_size: 16KiB per header (default) - max_total_size: 256KiB total (default) returns 431 status code when limits exceeded per RFC 6585.
46 lines
929 B
Text
46 lines
929 B
Text
# This file is generated by dune, edit dune-project instead
|
|
opam-version: "2.0"
|
|
version: "0.19"
|
|
synopsis: "Minimal HTTP server using threads"
|
|
maintainer: ["c-cube"]
|
|
authors: ["c-cube"]
|
|
license: "MIT"
|
|
tags: [
|
|
"http" "thread" "server" "tiny_httpd" "http_of_dir" "simplehttpserver"
|
|
]
|
|
homepage: "https://github.com/c-cube/tiny_httpd/"
|
|
bug-reports: "https://github.com/c-cube/tiny_httpd/issues"
|
|
depends: [
|
|
"dune" {>= "3.2"}
|
|
"seq"
|
|
"base-threads"
|
|
"result"
|
|
"hmap"
|
|
"iostream" {>= "0.2"}
|
|
"ocaml" {>= "4.13"}
|
|
"odoc" {with-doc}
|
|
"logs" {with-test}
|
|
"conf-libcurl" {with-test}
|
|
"ptime" {with-test}
|
|
"qcheck-core" {>= "0.9" & with-test}
|
|
]
|
|
depopts: [
|
|
"logs"
|
|
"magic-mime"
|
|
"mtime" {>= "2.0"}
|
|
]
|
|
build: [
|
|
["dune" "subst"] {dev}
|
|
[
|
|
"dune"
|
|
"build"
|
|
"-p"
|
|
name
|
|
"-j"
|
|
jobs
|
|
"@install"
|
|
"@runtest" {with-test}
|
|
"@doc" {with-doc}
|
|
]
|
|
]
|
|
dev-repo: "git+https://github.com/c-cube/tiny_httpd.git"
|