Commit Graph

  • 546e821c65 Add server_mount_fuzzer for static file serving (#2666) master yhirose 2026-11-12 21:52:33 -05:00
  • 53a7f4964e Add sse_parser_fuzzer for detail::SSEParser (#2665) yhirose 2026-11-12 21:11:48 -05:00
  • 8c5fd6aa08 OSS-Fuzz: Improve url_parser_fuzzer with more cases (#2664) Arthur Chan 2026-11-13 09:47:26 +08:00
  • a2ebab183d OSS-Fuzz: Add new fuzzer/options targets websocket (#2663) Arthur Chan 2026-11-13 09:47:22 +08:00
  • a39e081386 Test SSEParser directly instead of through a server yhirose 2026-11-12 19:07:54 -05:00
  • 07142256ed Extract SSE event stream parsing into detail::SSEParser yhirose 2026-11-12 18:27:58 -05:00
  • cc7a30f12f Preserve aliased keys when erasing entries (#2659) userandastunm 2026-11-11 14:32:09 -05:00
  • cdcd2ac6e6 Release v0.66.0 v0.66.0 latest yhirose 2026-11-10 17:19:39 -05:00
  • bd23a7b179 Keep the job queued when a dynamic worker thread cannot be created yhirose 2026-11-10 16:54:53 -05:00
  • 6d8dec3c3e Keep a redirect on the unix socket in ClientImpl::redirect (#2658) metsw24-max 2026-11-07 20:52:00 +05:30
  • 7e5d0683ac Release v0.65.0 v0.65.0 yhirose 2026-11-05 07:39:47 -05:00
  • 6df971434e Do not carry Request::params over to a redirect's Location yhirose 2026-11-05 07:04:31 -05:00
  • 39c98d4671 Ignore a Range header with a unit other than bytes (#2657) Eminy 2026-11-05 06:44:22 +03:00
  • a1ba73a256 Cap a send() or wolfSSL_read() length at INT_MAX (#2655) Wei-Lun Liandyhirose 2026-11-05 08:06:30 +09:00
  • 453b1b8613 keep a relative Location on its host in resolve_relative_location (#2654) metsw24-maxandyhirose 2026-11-02 23:42:31 +05:30
  • a18895f42e Let ClientImpl::stop() interrupt a request waiting on Windows (#2653) Yoshiki Matsuda 2026-10-31 02:40:50 +09:00
  • 24e58ce5b2 Release v0.64.0 v0.64.0 yhirose 2026-10-29 17:08:34 -04:00
  • a0ab09fc0a Add set_basic_auth and set_bearer_token_auth to WebSocketClient (#2652) Kim, Hyuk 2026-10-29 05:15:17 +09:00
  • 290c4c0bbe Add set_tunnel_hostname_addr_map() and deprecate set_hostname_addr_map() (#2647) Kim, Hyuk 2026-10-28 10:09:25 +09:00
  • 25ba40f6fe Reject an EOF without close_notify in the Mbed TLS and wolfSSL read (#2649) metsw24-max 2026-10-28 04:01:55 +05:30
  • 578e4815b7 Treat ':' as a path separator in sanitize_filename on Windows (#2651) metsw24-max 2026-10-28 03:46:21 +05:30
  • 252dbaa505 Remove dot segments from absolute redirect locations (#2648) Wleeaf 2026-10-26 05:56:32 +03:00
  • 8710fbd25d Refuse a ':' in a path a mount point serves on Windows (#2643) metsw24-max 2026-10-26 08:09:44 +05:30
  • 2f8b9f6f57 Guard last_event_id() against the async event loop in SSEClient (#2644) metsw24-max 2026-10-26 07:51:55 +05:30
  • 391de32115 finish short writes in write_websocket_frame and open_stream_ (#2642) metsw24-maxandyhirose 2026-10-26 07:49:53 +05:30
  • ba32b468a4 Honour Keychain trust settings when loading macOS system CAs (#2641) metsw24-max 2026-10-26 07:11:36 +05:30
  • 76f84a5bfd Honor set_decompress(false) in response streams (#2640) Luochenchen 2026-10-26 08:05:56 +08:00
  • d23d1b6029 Match a host name against subjectAltName only yhirose 2026-10-25 18:58:43 -04:00
  • 7d349cbeed Follow only 301, 302, 303, 307 and 308 redirects (#2646) Wleeaf 2026-10-26 01:55:20 +03:00
  • 5ceef83c54 Open a new connection for a redirect after sending Connection: close (#2645) WleeafandWleeaf 2026-10-26 00:19:34 +03:00
  • a210b43e11 Give the ARM cross-compile job's build step its own time limit yhirose 2026-10-22 18:00:44 -04:00
  • 7d28b64a03 Build BoringSSL with clang in the Linux CI job yhirose 2026-10-22 17:40:53 -04:00
  • 97a972fcef Give the issue-2431 job's test step its own time limit yhirose 2026-10-22 17:40:53 -04:00
  • 276cf08e84 Refuse a proxied path that does not start with a slash (#2638) metsw24-max 2026-10-23 02:31:58 +05:30
  • b4b24589ad Refuse to serve a path segment ending in a dot or a space yhirose 2026-10-22 11:16:27 -04:00
  • 70bed02bc9 Bound how much of an unread request body the server skips yhirose 2026-10-22 10:59:57 -04:00
  • 5db950e1e1 Normalize the extension of a user MIME type mapping when it is set yhirose 2026-10-22 10:21:06 -04:00
  • b8ae3e43d5 Answer 500 to an exception the exception handler gives no status yhirose 2026-10-22 10:01:48 -04:00
  • 64b5c68a46 Run RequestWithoutContentLengthOrTransferEncoding on Windows too yhirose 2026-10-22 09:32:29 -04:00
  • 1c91d54b7c Read no body from an unframed request in builds without TLS too yhirose 2026-10-22 08:50:17 -04:00
  • fbd3e2cc9b Answer 501 to a request with a transfer coding besides chunked yhirose 2026-10-22 07:58:28 -04:00
  • 32a0ca8b35 Ignore Range on requests other than GET and HEAD yhirose 2026-10-22 07:31:50 -04:00
  • b83b385ed4 Match trusted proxies as IP addresses yhirose 2026-10-22 00:37:09 -04:00
  • f297616584 Note that TLS settings do not pass through a plain HTTP redirect hop yhirose 2026-10-22 00:10:57 -04:00
  • 1e35f39675 Send the chunk overhead test requests whole before they are refused yhirose 2026-10-22 00:10:34 -04:00
  • e121385910 Reconnect after a TLS setting changes on a kept-alive client yhirose 2026-10-22 00:08:44 -04:00
  • fc37d3eae1 Add Server::set_compress() to turn off handler response compression yhirose 2026-10-21 23:34:48 -04:00
  • 3b8b9cf9d5 Parse a CA store PEM through a NUL-terminated copy on Mbed TLS yhirose 2026-10-21 23:28:19 -04:00
  • 3599533c24 Drop invalid response header fields before any header writer yhirose 2026-10-21 23:16:45 -04:00
  • 247a2abe4a Bound the bytes around chunk data in chunked transfer coding yhirose 2026-10-21 23:01:39 -04:00
  • 5bcfea7b90 Release v0.63.0 v0.63.0 yhirose 2026-10-21 22:26:15 -04:00
  • fd71c11e0e Verify the server certificate during the handshake on OpenSSL yhirose 2026-10-21 22:13:22 -04:00
  • fd5dd79bd2 Ready PSA Crypto before parsing a CA store on Mbed TLS 4.x yhirose 2026-10-21 17:16:11 -04:00
  • 6304fc6abb Keep the system CAs out when a custom CA comes through empty yhirose 2026-10-21 17:11:52 -04:00
  • 8772d10c90 Serve only canonical paths from mount points yhirose 2026-10-21 16:55:43 -04:00
  • 98647e059d Require client certificates once update_certs_pem() loads a client CA yhirose 2026-10-21 16:41:12 -04:00
  • 7a9cee0e05 Drop the SNI of a failed handshake on the Mbed TLS server yhirose 2026-10-21 16:29:56 -04:00
  • 71b5f0a1c8 Read a NUL-terminated client CA in SSLServer::PemMemory yhirose 2026-10-21 16:19:15 -04:00
  • 67b88030e8 End the stream at the header section for HEAD, 204 and 304 in open_stream (#2636) metsw24-max 2026-10-21 03:01:45 +05:30
  • 41c85c0733 Close the connection on an answered upgrade body in process_request (#2637) metsw24-max 2026-10-21 02:38:21 +05:30
  • 74ef3c4218 Release v0.62.0 v0.62.0 yhirose 2026-10-18 20:47:10 -04:00
  • f17d314979 Send the client's credentials and proxy target on a stream request yhirose 2026-10-18 20:32:27 -04:00
  • ebcd5551fd Report each failed client request to the error logger once yhirose 2026-10-18 19:21:41 -04:00
  • d99c697be6 Report a response body over the limit as ExceedMaxPayloadSize yhirose 2026-10-18 18:40:23 -04:00
  • 344aceb446 Run the pong timeout tests in the main test suite yhirose 2026-10-18 18:03:08 -04:00
  • 696b94b5ed Wake a WebSocket read on a pong timeout on every platform yhirose 2026-10-18 17:23:05 -04:00
  • 801bf2e0d2 Let SSEClient::stop() interrupt a blocked read yhirose 2026-10-18 14:01:59 -04:00
  • 03fa890a2e Revert "Let SSEClient::stop() interrupt a blocked read" yhirose 2026-10-18 13:19:15 -04:00
  • 1d5f0323b1 Run the pre-routing handler once for an unmatched WebSocket upgrade yhirose 2026-10-18 12:41:23 -04:00
  • cc9d67404e Dispatch an SSE event with an empty type as "message" yhirose 2026-10-18 12:41:23 -04:00
  • 2e3cb0f985 Parse chunked trailers when the stream API decompresses yhirose 2026-10-18 12:41:23 -04:00
  • 07edfb86b4 Do not report a body that ends with the connection as an error yhirose 2026-10-18 12:41:23 -04:00
  • 106edcf606 Return a 3xx without a Location instead of failing the redirect yhirose 2026-10-18 12:41:23 -04:00
  • 906a7bf04e Keep an accepting verifier from overriding Mbed TLS verification yhirose 2026-10-18 12:41:23 -04:00
  • 3744227de2 Let SSEClient::stop() interrupt a blocked read yhirose 2026-10-18 12:41:23 -04:00
  • 30879bb48b Honor the PEM lengths in PemMemory yhirose 2026-10-18 12:41:23 -04:00
  • 9bfd2ddf1c Fix README and docs pages that no longer match the code yhirose 2026-10-18 10:13:57 -04:00
  • 94cf1b5c9a Support HTTP proxies in WebSocketClient (#2635) Kim, Hyuk 2026-10-18 22:24:59 +09:00
  • 7220bdb8b2 Pass the read state to curl by address in the Expect test yhirose 2026-10-18 07:44:30 -04:00
  • 7234944098 Fix the warnings left in the 32-bit, BoringSSL and MSVC builds yhirose 2026-10-18 00:36:18 -04:00
  • e97165b5dc Spawn a dynamic thread when queued jobs outnumber idle threads yhirose 2026-10-17 23:55:12 -04:00
  • 062666f3a1 Fix the warnings clang gives when building the tests yhirose 2026-10-17 23:21:28 -04:00
  • e4b3865387 Revert "Encode the characters RFC 3986 doesn't allow in a client path" yhirose 2026-10-17 09:00:41 -04:00
  • 28f39225fc Encode the characters RFC 3986 doesn't allow in a client path yhirose 2026-10-17 07:06:24 -04:00
  • 87940631e2 Check the client certificate in the PEM memory test and skip the CA dir Claude 2026-10-17 05:00:23 +00:00
  • 4836eb0fa5 Check both outcomes in the update_certs_pem client cert test Claude 2026-10-17 03:56:21 +00:00
  • d00af3f4e6 Test client cert rejection for PEM memory servers and update_certs_pem Claude 2026-10-17 03:35:14 +00:00
  • 958f9aa82b Take resumable test sessions from the new-session callback yhirose 2026-10-17 00:32:39 -04:00
  • f1c5068ee8 Build the tests that throw only with exceptions yhirose 2026-10-17 00:32:39 -04:00
  • 3b9931a85c Keep time_point::max() clear of the Windows max macro yhirose 2026-10-17 00:32:29 -04:00
  • 2594f17983 Drop tests the merge duplicated yhirose 2026-10-17 00:21:49 -04:00
  • 0b382e353e Merge origin/master yhirose 2026-10-17 00:08:39 -04:00
  • cf409f7bab Note how multipart names with backslashes are read yhirose 2026-10-16 23:52:15 -04:00
  • 26febe0769 Say why the Digest uri is in origin form yhirose 2026-10-16 23:52:15 -04:00
  • a09e00b03d Do not resume sessions on an OpenSSL context with a verify callback yhirose 2026-10-16 23:52:15 -04:00
  • 8ca46a4db5 Bound the number of interim responses a client skips yhirose 2026-10-16 23:52:15 -04:00
  • 560126bffc Accept a Unix socket path with "//" in it yhirose 2026-10-16 23:52:15 -04:00
  • be5043a240 Replace the Content-Type along with the content yhirose 2026-10-16 23:52:15 -04:00
  • 7bf66db6ca Close the connection after a response body with no length yhirose 2026-10-16 23:52:15 -04:00
  • 645bdab90e Reject a certificate whose verify callback throws yhirose 2026-10-16 23:52:15 -04:00