1. 24 7月, 2018 2 次提交
  2. 17 7月, 2018 1 次提交
  3. 14 7月, 2018 1 次提交
  4. 11 7月, 2018 1 次提交
    • B
      consolidated security omnibus for 1.0.9 · 0a29de7a
      Bart Wyatt 提交于
      - Handle running out of fds on bnet accept
      - add basic validation to http `Host` headers on incoming requests
        * the header must exactly match an expected server[:port]
        * missing ports are assumed defaulted based on scheme to 80/443
      - add new configuration option `http-alias` to add additional acceptable hosts
        * the host:port present in the http(s) addresses is automatically acceptable but must be exact (localhost === localhost,  localhost !== 127.0.0.1, etc)
      - add new configuration option `http-validate-host` which defaults to true, if false these checks are not performed and any `Host` header is acceptable
      - correct cleos behavior which was not sending correct `Host` headers when the urls indicated non-default ports
      Co-authored-by: NBart Wyatt <bart.wyatt@block.one>
      Co-authored-by: NMatt Witherspoon <32485495+spoonincode@users.noreply.github.com>
      0a29de7a
  5. 10 7月, 2018 5 次提交
  6. 05 7月, 2018 7 次提交
  7. 29 6月, 2018 1 次提交
  8. 22 6月, 2018 2 次提交
  9. 20 6月, 2018 1 次提交
  10. 18 6月, 2018 1 次提交
  11. 15 6月, 2018 6 次提交
  12. 14 6月, 2018 4 次提交
  13. 10 6月, 2018 1 次提交
  14. 09 6月, 2018 2 次提交
  15. 08 6月, 2018 2 次提交
  16. 07 6月, 2018 3 次提交