1
0

Merge pull request from GHSA-3f39-6537-3cgc

This commit implements HTTP header and body validation to fix
[SIF-2023-002](https://advisory.silicon.moe/advisory/sif-2023-002/)

Signed-off-by: perillamint <perillamint@silicon.moe>
Co-authored-by: perillamint <perillamint@silicon.moe>
Co-authored-by: yunochi <yuno@yunochi.com>
This commit is contained in:
syuilo
2023-11-14 17:09:45 +09:00
committed by GitHub
parent 30bb24d18c
commit 65c5626b65
4 changed files with 79 additions and 6 deletions
+14 -2
View File
@@ -1,4 +1,4 @@
lockfileVersion: '6.0'
lockfileVersion: '6.1'
settings:
autoInstallPeers: true
@@ -182,6 +182,9 @@ importers:
fastify:
specifier: 4.24.3
version: 4.24.3
fastify-raw-body:
specifier: ^4.2.2
version: 4.2.2
feed:
specifier: 4.2.2
version: 4.2.2
@@ -7001,7 +7004,7 @@ packages:
hasBin: true
peerDependencies:
'@swc/core': ^1.2.66
chokidar: 3.5.3
chokidar: ^3.5.1
peerDependenciesMeta:
chokidar:
optional: true
@@ -11727,6 +11730,15 @@ packages:
resolution: {integrity: sha512-79ak0JxddO0utAXAQ5ccKhvs6vX2MGyHHMMsmZkBANrq3hXc1CHzvNPHOcvTsVMEPl5I+NT+RO4YKMGehOfSIg==}
dev: false
/fastify-raw-body@4.2.2:
resolution: {integrity: sha512-6l4fXtxNn7WOQiylu5fv9/JfUTvWCg1ED4gF44hqnVesgttOXEUMnNkdV8ZxwufCstRyUYaYSBIN4VuRHDbJkw==}
engines: {node: '>= 10'}
dependencies:
fastify-plugin: 4.5.0
raw-body: 2.5.2
secure-json-parse: 2.7.0
dev: false
/fastify@4.24.3:
resolution: {integrity: sha512-6HHJ+R2x2LS3y1PqxnwEIjOTZxFl+8h4kSC/TuDPXtA+v2JnV9yEtOsNSKK1RMD7sIR2y1ZsA4BEFaid/cK5pg==}
dependencies: