Safety Fixes
[fixed: WebSocket fragmented messages bypass the configured maximum pa…]
[json parsers parse depth limited to 1024 to prevent stack overflow]
[fixed the directory traversal]
[solution for non encoded second '/' and testcase based on POC]
[fixed handling websockets handle_upgrade in case of request completed…]
What's Changed
- Fix #1199: correct ownership transfer in json::detail::r_string move operations (prevent leaks and invalid frees) by @jwolak in #1200
- Fixing type-limits warning/error. by @yoboujon in #1203
- Feature/issue #1077 Add TCP Socket Options for HTTP and WebSocket Connections by @jwolak in #1202
- Fix unused parameter warning in inject_header_via_set_header test case by @jwolak in #1211
- docs: document TCP_NODELAY settings for HTTP and WebSocket guides by @jwolak in #1215
- Fix broken star history chart in README by @OctoBored in #1219
- fix(query): decode %5B/%5D dict keys like literal brackets (#1109) by @soniafergusonship in #1223
- fix(server): back off accepts on fd exhaustion (#1228) by @slindow-sds in #1231
- Fix typo in utility.h by @hilbert149 in #1236
New Contributors
- @jwolak made their first contribution in #1200
- @yoboujon made their first contribution in #1203
- @OctoBored made their first contribution in #1219
- @soniafergusonship made their first contribution in #1223
- @slindow-sds made their first contribution in #1231
- @hilbert149 made their first contribution in #1236
Full Changelog: v1.3.3...v1.3.4