You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Jessie Murray ea01d687b5
Apply ACL rules to WebSocket commands
ACLs were not considered when processing commands coming over WebSocket
connections. WS commands that are disabled with ACLs are now rejected
with a custom message for JSON and raw WS clients, the two supported
formats for this protocol. For JSON an equivalent HTTP status code is
included in the response, although this is only an indication of how
Webdis would have responded if it came from a regular HTTP request.

Tests are added to validate that DEBUG commands are rejected by Webdis
without even making it to Redis, for both JSON and raw WS clients.

Add DEBUG OBJECT demo to websocket.html: DEBUG is disabled with ACLs
by default in webdis.json. A DEBUG button is added to the WebSocket
HTML demo to show what kind of response is produced when WebSocket
clients attempt to send such a command.

The error responses are documented in the README in the ACL section.

Fixes #240.
12 months ago
..
b64 Add "fall through" comments in switch to disable warning 4 years ago
formats Apply ACL rules to WebSocket commands 12 months ago
hiredis [PATCH] Allow specifying the keepalive interval 1 year ago
http-parser Fix http_parser check for architectures with unsigned chars 3 years ago
jansson CodeQL: Potentially uninitialized local variable 3 years ago
md5 Fix UB warning in md5.c 1 year ago
sha1 Release 0.1.8 5 years ago
acl.c Add missing includes for strings.h 2 years ago
acl.h Release 0.1.8 5 years ago
client.c Add missing includes for strings.h 2 years ago
client.h Avoid responding to the wrong fd after client disconnection 3 years ago
cmd.c Add missing includes for strings.h 2 years ago
cmd.h Apply ACL rules to WebSocket commands 12 months ago
conf.c Add "hiredis" config block, with keep_alive_sec 1 year ago
conf.h Add "hiredis" config block, with keep_alive_sec 1 year ago
http.c Add missing includes for strings.h 2 years ago
http.h Add HEADER_CHECK_DUPE to bypass duplicate check 3 years ago
pool.c Review comments 3 years ago
pool.h Release 0.1.8 5 years ago
server.c Initialize logging earlier 1 year ago
server.h Encrypt connections to Redis 3 years ago
slog.c Fix log identification for TRACE 1 year ago
slog.h WS: Log commands 3 years ago
version.h Version bump after release 1 year ago
webdis.c Release 0.1.8 5 years ago
websocket.c Apply ACL rules to WebSocket commands 12 months ago
websocket.h Call ws_close_if_able instead of ws_client_free in worker.c 3 years ago
worker.c Call ws_close_if_able instead of ws_client_free in worker.c 3 years ago
worker.h Release 0.1.8 5 years ago