Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] develop from bfenetworks:develop #285

Merged
merged 167 commits into from
Oct 4, 2024
Merged

Conversation

pull[bot]
Copy link

@pull pull bot commented Jan 31, 2022

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

iyangsj and others added 30 commits September 16, 2021 17:45
merge from master for v1.5.0 release
Signed-off-by: chenchen.ccqy66 <[email protected]>
merge the fix for compile error in windows
Feature: Add web monitor enable config item resolve #936
feat:support cidr ip to block
Docs: update web monitor server enabled config descriptions
Update license-eye tool usage
bugfix: start bfe monitor web server only when enable
mileszhang2016 and others added 20 commits January 10, 2023 10:19
fix typos

Signed-off-by: clarinette9 <[email protected]>
Signed-off-by: clarinette9 <[email protected]>
Signed-off-by: kwanhur <[email protected]>
Signed-off-by: clarinette9 <[email protected]>
Signed-off-by: clarinette9 <[email protected]>
Signed-off-by: clarinette9 <[email protected]>
Signed-off-by: clarinette9 <[email protected]>
Signed-off-by: clarinette9 <[email protected]>
Signed-off-by: cui fliter <[email protected]>
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.
- [Release notes](https://github.com/golang/sys/releases)
- [Commits](https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@codecov-commenter
Copy link

codecov-commenter commented Dec 9, 2023

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️

liangchuan and others added 8 commits March 13, 2024 10:31
Signed-off-by: liangchuan <[email protected]>
Signed-off-by: liangchuan <[email protected]>
remove TestSetKeepAlive
Maintaining HPACK state requires that we parse and process all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, we don't allocate memory to store the excess headers but we do parse them. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send.

Set a limit on the amount of excess header frames we will process before closing a connection.

This is CVE-2023-45288 and Go issue https://go.dev/issue/65051.
Replace go compile args to TARGETOS and TARGETARCH to support multiarch compile

Signed-off-by: Allen Chen <[email protected]>
@iyangsj iyangsj merged commit 22e3257 into iyangsj:develop Oct 4, 2024
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.