Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[pull] develop from bfenetworks:develop #291

Merged
merged 1 commit into from
Jan 19, 2025
Merged

Conversation

pull[bot]
Copy link

@pull pull bot commented Jan 19, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

* typo: fix docs/example markdown lint




* typo: code span on function prototype of bfe callback




* typo: fix docs/introduction markdown lint and syntax




* typo: fix docs/installation markdown lint and syntax




* typo: fix docs/faq markdown lint and syntax




* typo: fix docs/modules markdown lint




* typo: fix docs/operation markdown lint




* typo: fix docs/monitor markdown lint and syntax




* Add en_us/condition/request/context.md



* Add zh_cn/condition/request/context.md



* add req_context_value_in() to condition_primitive_index.md and adjust sequence (#1010)



* ci: add markdown lint action




* typo: fix docs/condition markdown lints




* Revert "chore: add typos in pre-commit"



* typo: fix bfe_balance spelling




* typo: fix bfe_basic BOM




* typo: fix bfe_config spelling




* typo: fix bfe_fcgi spelling




* typo: fix bfe_http bfe_server spelling




* typo: fix bfe_http2 spelling




* typo: fix bfe_module spelling




* typo: format bfe_modules/mod_userid




* typo: fix bfe_route spelling




* typo: fix bfe_spdy spelling




* typo: fix bfe_tls spelling




* typo: format bfe_util/socket_util




* chore: ignore log rotate files




* typo: remove dot at the end




* Fix typo in  mod_geo (#1029)




* Add staticcheck pre-commit hook (#1019)




* Add precommit hook for markdownlint (#1038)




* Evict the oldest conn when the conn pool exceeds its limit (#1044)




* import code-lint workflow job (#1037)




* fix go.yaml dependency



* fix arm build error in golang1.18



* refactor: replace strings.Replace with strings.ReplaceAll

strings.ReplaceAll(s, old, new) is a wrapper function for
strings.Replace(s, old, new, -1). But strings.ReplaceAll is more
readable and removes the hardcoded -1.




* Create some slices with enough capacity (#1054)




* Update ci.yml (#1061)



* fix build failed on macos (#1067)



* Make some optimization for leastConnsBalance (#1062)




* Fix some unreachable code in unit tests (#1068)




* Support HTTP/2 fingerprint (#1072)




* update v1.6.0 changelog




* update changelog and version file




* Update CHANGELOG.md

fix minor typo




* Update condition_grammar.md

fix typos



* Update README.md



* update mkdocs yml and download link for v1.5 and v1.6 (#1084)




* Resolved #800 support test configuration




* Update MAINTAINERS.md




* Update MAINTAINERS.md




* update maintainers.md




* fix some typo (#1113)




* Update ci.yml



* Update ADOPTERS.md (#1123)




* build(deps): bump golang.org/x/sys (#1101)

Bumps [golang.org/x/sys](/~https://github.com/golang/sys) from 0.0.0-20211216021012-1d35b9e2eb4e to 0.1.0.
- [Release notes](/~https://github.com/golang/sys/releases)
- [Commits](/~https://github.com/golang/sys/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
...





* remove TestSetKeepAlive




* remove TestSetKeepAlive




* Resubmit with Signed-off-by line




* Resubmit with Signed-off-by line




* http2: close connections when receiving too many headers (#1156)

Maintaining HPACK state requires that we parse and process all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, we don't allocate memory to store the excess headers but we do parse them. This permits an attacker to cause an HTTP/2 endpoint to read arbitrary amounts of header data, all associated with a request which is going to be rejected. These headers can include Huffman-encoded data which is significantly more expensive for the receiver to decode than for an attacker to send.

Set a limit on the amount of excess header frames we will process before closing a connection.

This is CVE-2023-45288 and Go issue https://go.dev/issue/65051.



* Update Dockerfile to support multiarch build (#1120)

Replace go compile args to TARGETOS and TARGETARCH to support multiarch compile




* Fix format issue in bfe_http/request_test.go (#1163)




* Temporarily remove some test cases using legacy test data (#1193)



* The experimental `dynamic plugin` is deprecated (#1197)



* Update versions of some thirdpaty modules (#1198)

Fix broken unit tests



* Upgrade third-party modules for security reasons (#1201)

Remove duplicated code lint workflow




* bfe_wasm




* remove v2




* remove redundant codes




* fix OnPluginStart




* refine codes




* fix.




* fix nil




* rename package & remove some obsolete lines.




* refine




* fix & refine




* docs of mod_wasmplugin




* add link in summary.md to mod_wasmplugin




* fix "bfe_http : readloop goroutine leak #1209"




* update changlog and version file for v1.7.0



---------

Signed-off-by: kwanhur <huang_hua2012@163.com>
Signed-off-by: Song Jian <songjian@yf-networks.com>
Signed-off-by: suhang <1099811329@qq.com>
Signed-off-by: chenchen.ccqy66 <chenchen.ccqy66@bytedance.com>
Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
Signed-off-by: likepeng <likepeng@didiglobal.com>
Signed-off-by: Abirdcfly <fp544037857@gmail.com>
Signed-off-by: xqbumu <xqbumu@163.com>
Signed-off-by: clarinette9 <songjiansuperman@163.com>
Signed-off-by: cui fliter <imcusg@gmail.com>
Signed-off-by: Benjamin <72671586+benjx1990@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: liangchuan <liangchuan@yf-networks.com>
Signed-off-by: Allen Chen <watchword@gmail.com>
Signed-off-by: cuishuang <imcusg@gmail.com>
Signed-off-by: Sijie Yang <iyangsj@gmail.com>
Signed-off-by: xuleiming <xuleiming@yf-networks.com>
Co-authored-by: kwanhur <huang_hua2012@163.com>
Co-authored-by: Sijie Yang <iyangsj@gmail.com>
Co-authored-by: Miles Zhang <zhangmiao02@baidu.com>
Co-authored-by: blinkbean <1099811329@qq.com>
Co-authored-by: wolfCoder <chenchen_839@126.com>
Co-authored-by: daimg <daiming@baidu.com>
Co-authored-by: Eng Zer Jun <engzerjun@gmail.com>
Co-authored-by: kezhenxu94 <kezhenxu94@apache.org>
Co-authored-by: supermario1990 <406517780@qq.com>
Co-authored-by: cooper-li <963492628@qq.com>
Co-authored-by: Abirdcfly <fp544037857@gmail.com>
Co-authored-by: 卜木 <xqbumu@gmail.com>
Co-authored-by: cui fliter <imcusg@gmail.com>
Co-authored-by: Benjamin <72671586+benjx1990@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: liangchuan <liangchuan@yf-networks.com>
Co-authored-by: z8n24 <zhaoxueqin24@Gmail.com>
Co-authored-by: watchword <watchword@gmail.com>
Co-authored-by: xuleiming <xuleiming@yf-networks.com>
Co-authored-by: Song Jian <songjian@yf-networks.com>
@pull pull bot added the ⤵️ pull label Jan 19, 2025
@pull pull bot merged commit e1a8701 into iyangsj:develop Jan 19, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant