mirror of
https://github.com/c-cube/tiny_httpd.git
synced 2026-03-07 21:37:57 -05:00
ba19880d75
* fix: use realpath to validate filesystem paths against traversal - add string_prefix helper to check path containment - compute root_canonical once per add_vfs_ call - use realpath only for filesystem (on_fs=true), keeping simple contains_dot_dot check for VFS - paths are already URL-decoded by Route.rest_of_path_urlencoded * fix: add header size limits to prevent memory exhaustion add optional limits to Headers.parse_: - max_headers: 100 (default) - max_header_size: 16KiB per header (default) - max_total_size: 256KiB total (default) returns 431 status code when limits exceeded per RFC 6585.
53 lines
1.3 KiB
YAML
53 lines
1.3 KiB
YAML
name: build
|
|
|
|
on:
|
|
pull_request:
|
|
push:
|
|
branches:
|
|
- main
|
|
|
|
jobs:
|
|
build:
|
|
strategy:
|
|
fail-fast: true
|
|
matrix:
|
|
os:
|
|
- ubuntu-latest
|
|
#- macos-latest
|
|
#- windows-latest
|
|
ocaml-compiler:
|
|
- 4.13.x
|
|
- 4.14.x
|
|
- 5.03.x
|
|
|
|
runs-on: ${{ matrix.os }}
|
|
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v3
|
|
|
|
- run: sudo apt-get update
|
|
if: ${{ matrix.os == 'ubuntu-latest' }}
|
|
|
|
- name: Use OCaml ${{ matrix.ocaml-compiler }}
|
|
uses: ocaml/setup-ocaml@v3
|
|
with:
|
|
ocaml-compiler: ${{ matrix.ocaml-compiler }}
|
|
allow-prerelease-opam: true
|
|
opam-depext-flags: --with-test
|
|
|
|
- run: opam install ./tiny_httpd.opam ./tiny_httpd_camlzip.opam --deps-only --with-test
|
|
|
|
- run: opam exec -- dune build @install -p tiny_httpd,tiny_httpd_camlzip
|
|
|
|
- run: opam exec -- dune build @src/runtest @examples/runtest @tests/runtest -p tiny_httpd
|
|
if: ${{ matrix.os == 'ubuntu-latest' }}
|
|
|
|
- run: opam install tiny_httpd
|
|
|
|
- run: opam exec -- dune build @src/runtest @examples/runtest @tests/runtest -p tiny_httpd_camlzip
|
|
if: ${{ matrix.os == 'ubuntu-latest' }}
|
|
|
|
- run: opam install logs magic-mime -y
|
|
|
|
- run: opam exec -- dune build @install -p tiny_httpd,tiny_httpd_camlzip
|