-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Restyle [pull] master from gorilla:master #3
base: master
Are you sure you want to change the base?
Conversation
This fix addresses a potential denial-of-service (DoS) vector that can cause an integer overflow in the presence of malicious WebSocket frames. The fix adds additional checks against the remaining bytes on a connection, as well as a test to prevent regression. Credit to Max Justicz (https://justi.cz/) for discovering and reporting this, as well as providing a robust PoC and review. * build: go.mod to go1.12 * bugfix: fix DoS vector caused by readLimit bypass * test: update TestReadLimit sub-test * bugfix: payload length 127 should read bytes as uint64 * bugfix: defend against readLength overflows
441ed42
to
2fe411c
Compare
Fixes a couple of small typo's in the example test docs.
Pull request analysis by VIZIPI Below you will find who is the most qualified team member to review your code. Reviewers with knowledge related to these changes
Potential missing files from this Pull requestfiles commonly committed with a subset of this pr, but not committed this time. (click to collapse)
Committed file ranks(click to expand)32.76% [go.sum] 93.10% [doc.go] 98.28% [conn.go] 82.76% [examples/echo/server.go] 32.76% [prepared.go] 53.45% [examples/chat/home.html] 50.00% [example_test.go] 89.66% [client_server_test.go] 0.00% [.github/release-drafter.yml] 89.66% [README.md] |
2fe411c
to
f83a549
Compare
f83a549
to
e1e156f
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There are accessibility issues in these changes.
@@ -92,7 +92,7 @@ | |||
<div id="log"></div> | |||
<form id="form"> | |||
<input type="submit" value="Send" /> | |||
<input type="text" id="msg" size="64"/> | |||
<input type="text" id="msg" size="64" autofocus /> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks like there's a label missing for this input. That makes it hard for people using screen readers or voice control to use the input.
Using empty struct for signaling is more idiomatic compared to booleans because users might wonder what happens on false or true. Empty struct removes this problem. There is also a side benefit of occupying less memory but it should be negligible in this case.
e1e156f
to
99b1681
Compare
99b1681
to
11607cc
Compare
11607cc
to
4ae5a1e
Compare
4ae5a1e
to
3177819
Compare
3177819
to
78d4538
Compare
Manage this branch in SquashTest this branch here: https://pull-2-restyled-p3tjf.squash.io |
A duplicate of #2 with additional commits that automatically address
incorrect style, created by Restyled.
Since the original Pull Request was opened as a fork in a contributor's
repository, we are unable to create a Pull Request branching from it with only
the style fixes.
The following Restylers made fixes:
To incorporate these changes, you can either:
Merge this Pull Request instead of the original, or
Ask your contributor to locally incorporate these commits and push them to
the original Pull Request
Expand for example instructions
NOTE: As work continues on the original Pull Request, this process will
re-run and update (force-push) this Pull Request with updated style fixes as
necessary. If the style is fixed manually at any point (i.e. this process finds
no fixes to make), this Pull Request will be closed automatically.
Sorry if this was unexpected. To disable it, see our documentation.