mirror of
1
Fork 0
gotosocial/internal
Daniele Sluijters 746f3fa4e6
Additional IP range validations (#1152)
* [bugfix] Ensure requests happen over TCP

It's possible for the network to be udp4 or udp6. This is rather
unlikely to occur, but since we're given the network anyway as part of
the Sanitize function getting called we might as well check for it.

* [chore] Align reserved v6 blocks to IANA registry

* [chore] Add test for ValidateIP

The net and netip packages diverge in that net.ParseIP will consider an
IPv4-mapped address to be an IPv4 address and as such it would get
caught by the IPv4Reserved list. However, netip considers it an IPv6
address, so we need to ensure the mapped range is in IPv6Reserved.

* [chore] Align reserved v4 blocks to IANA registry

This includes a number of tests for /32's explicitly called out in the
registry to ensure we always consider those invalid.
2022-11-26 11:09:55 +00:00
..
ap [feature] Refetch emojis when they change on remote instances (#905) 2022-10-13 15:16:24 +02:00
api [feature] `PATCH /api/v1/admin/custom_emojis/{id}` endpoint (#1061) 2022-11-24 18:12:07 +00:00
concurrency [feature] various worker / request queue improvements (#995) 2022-11-08 10:35:24 +01:00
config [feature] Add `admin media prune orphaned` CLI command (#1146) 2022-11-25 17:23:42 +00:00
db [feature] Prune timelines once per hour to plug memory leak (#1117) 2022-11-22 18:38:10 +00:00
email [chore] use our own logging implementation (#716) 2022-07-19 10:47:55 +02:00
federation [chore] cleanup storage implementation, no need for multiple interface types (#1131) 2022-11-24 09:35:46 +01:00
gotosocial test the media manager a bit, add shutdown logic 2022-01-10 18:36:09 +01:00
gtserror [feature] Read + Write tombstones for deleted Actors (#1005) 2022-11-11 12:18:38 +01:00
gtsmodel [performance] don't use relations to select notification structs, use caches instead (#1072) 2022-11-18 17:23:14 +01:00
httpclient Additional IP range validations (#1152) 2022-11-26 11:09:55 +00:00
id [feature] Prune timelines once per hour to plug memory leak (#1117) 2022-11-22 18:38:10 +00:00
log [chore] simplify logging to remove "safetywriter" given os.File has concurrency protection (#1083) 2022-11-20 17:40:15 +01:00
media [feature] Add `admin media prune orphaned` CLI command (#1146) 2022-11-25 17:23:42 +00:00
messages Extend license notices to 2022 (#354) 2021-12-20 18:42:19 +01:00
netutil Additional IP range validations (#1152) 2022-11-26 11:09:55 +00:00
oauth [feature] `oob` oauth token support (#889) 2022-10-08 13:49:56 +02:00
oidc [chore] use our own logging implementation (#716) 2022-07-19 10:47:55 +02:00
processing [feature] `PATCH /api/v1/admin/custom_emojis/{id}` endpoint (#1061) 2022-11-24 18:12:07 +00:00
regexes [feature] Add `admin media prune orphaned` CLI command (#1146) 2022-11-25 17:23:42 +00:00
router [feature] Add opt-in RSS feed for account's latest Public posts (#897) 2022-10-08 14:00:39 +02:00
storage [chore] cleanup storage implementation, no need for multiple interface types (#1131) 2022-11-24 09:35:46 +01:00
stream Fix streamed messages ending up in wrong timeline(s) (#325) 2021-11-22 19:03:21 +01:00
text [chore] markdown: disable Smartypants rendering (#1111) 2022-11-22 11:08:50 +01:00
timeline [feature] Prune timelines once per hour to plug memory leak (#1117) 2022-11-22 18:38:10 +00:00
trans [chore] Test fixes (#788) 2022-08-31 17:31:21 +02:00
transport [feature/performance] Fail fast when doing remote transport calls inside incoming request contexts (#1119) 2022-11-23 21:40:07 +00:00
typeutils [feature] Prune timelines once per hour to plug memory leak (#1117) 2022-11-22 18:38:10 +00:00
uris [chore] Global server configuration overhaul (#575) 2022-05-30 14:41:24 +02:00
util [bugfix] Fix unicode-unaware word boundary check in hashtags (#1049) 2022-11-15 16:05:34 +01:00
validate [feature] Allow newly uploaded emojis to be placed in categories (#939) 2022-11-14 22:47:27 +00:00
visibility [bugfix] Prevent future statuses entering timelines (#1134) 2022-11-24 13:54:49 +01:00
web [chore/frontend] remove references to unused bundle.js (#1128) 2022-11-23 15:32:57 +01:00