BackPup/node

0 Fork 0

mirror of https://github.com/nodejs/node.git synced 2026-11-09 15:11:11 -05:00

Files

T

Matteo Collina ee618a7ab2 http,https: protect against slow headers attack

CVE-2018-12122

An attacker can send a char/s within headers and exahust the resources
(file descriptors) of a system even with a tight max header length
protection. This PR destroys a socket if it has not received the headers
in 40s.

PR-URL: https://github.com/nodejs-private/node-private/pull/144
Reviewed-By: Sam Roberts <vieuxtech@gmail.com>
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: James M Snell <jasnell@gmail.com>

2018-11-28 11:36:34 +11:00

bootstrap

lib: fix comment nits in bootstrap\loaders.js

2018-11-27 16:15:34 +02:00

cluster

net,dgram: add ipv6Only option for net and dgram

2018-11-22 21:45:08 +08:00

crypto

crypto: convert to arrow function

2018-11-26 17:42:38 +05:30

dns

dns: fix inconsistent (hostname vs host)

2018-10-20 21:56:28 -07:00

fs: inline typeof check

2018-11-19 20:19:07 -08:00

http2

http2: fix session[kSession] undefined issue

2018-11-24 18:19:11 -08:00

modules

fs: make process.binding('fs') internal

2018-11-16 21:56:29 +09:00

process

lib: set stderr._destroy to dummyDestroy

2018-11-18 18:26:09 -08:00

repl

repl: support top-level for-await-of

2018-10-28 15:07:45 +01:00

streams

stream: do not use crypto.DEFAULT_ENCODING in lazy_transform.js

2018-11-18 08:40:23 -08:00

test

src: name EmbededderGraph edges and use class names for nodes

2018-10-04 15:32:30 +02:00

util

util: remove unreachable branch

2018-11-20 12:50:15 -05:00

vm: add dynamic import support

2018-10-06 17:33:25 -05:00

assert.js

assert: remove internal errorCache property

2018-10-09 06:39:46 -07:00

async_hooks.js

bootstrapper: move internalBinding to NativeModule

2018-10-04 11:55:34 +02:00

bash_completion.js

src: cache the result of GetOptions() in JS land

2018-11-07 20:40:38 -08:00

buffer.js

buffer: fix writeUInt16BE range check

2018-11-08 15:22:19 -08:00

child_process.js

child_process: allow 'http_parser' monkey patching again

2018-11-08 14:38:23 -08:00

cli_table.js

lib: refactor cli table

2018-07-14 14:04:38 +02:00

constants.js

os: lazy loaded

2018-05-18 15:25:41 +02:00

dgram.js

bootstrapper: move internalBinding to NativeModule

2018-10-04 11:55:34 +02:00

domexception.js

bootstrapper: move internalBinding to NativeModule

2018-10-04 11:55:34 +02:00

encoding.js

src: remove function hasTextDecoder in encoding.js

2018-10-16 10:08:22 -07:00

error-serdes.js

worker: improve error (de)serialization

2018-06-06 19:43:59 +02:00

errors.js

tls: add min/max protocol version options

2018-11-22 09:14:58 -08:00

fixed_queue.js

lib: expose FixedQueue internally and fix nextTick bug

2018-05-06 07:21:32 +02:00

freelist.js

async_hooks: add missing async_hooks destroys in AsyncReset

2018-10-10 08:45:56 +02:00

http.js

http,https: protect against slow headers attack

2018-11-28 11:36:34 +11:00

inspector_async_hook.js

async_hooks: lazy loading for startup performance

2018-05-18 15:32:10 +02:00

linkedlist.js

linkedlist: correct grammar in comments

2017-07-31 08:03:19 +08:00

net.js

fs: make process.binding('fs') internal

2018-11-16 21:56:29 +09:00

options.js

src: cache the result of GetOptions() in JS land

2018-11-07 20:40:38 -08:00

per_context.js

src: flip Atomics.notify alias

2018-09-18 17:10:40 -05:00

print_help.js

lib: suppress crypto related env vars in help msg

2018-11-27 05:41:34 +01:00

priority_queue.js

timers: fix priority queue removeAt

2018-11-14 20:38:00 -08:00

querystring.js

lib: move encodeStr function to internal for reusable

2018-11-20 18:24:02 -08:00

queue_microtask.js

lib: trigger uncaught exception handler for microtasks

2018-10-23 13:05:57 -05:00

readline.js

icu: make process.binding('icu') internal

2018-10-08 23:42:52 -04:00

readme.md

doc: clarify text about internal module changes

2018-07-31 08:28:40 +03:00

repl.js

lib: switch to Number.isNaN

2018-02-16 18:09:56 +01:00

safe_globals.js

lib: simplify own keys retrieval

2018-11-26 01:31:49 +02:00

socket_list.js

lib: convert to arrow function

2018-11-26 20:34:32 +05:30

stream_base_commons.js

net,http2: merge after-write code

2018-11-21 09:53:49 +01:00

timers.js

lib: remove useless getLibuvNow in internal/timers

2018-11-03 19:15:57 -07:00

tls.js

tls: change var to const

2018-08-12 10:44:53 -07:00

trace_events_async_hooks.js

bootstrapper: move internalBinding to NativeModule

2018-10-04 11:55:34 +02:00

tty.js

os: lazy loaded

2018-05-18 15:25:41 +02:00

url.js

lib: move encodeStr function to internal for reusable

2018-11-20 18:24:02 -08:00

util.js

src,lib: move natives and constants to internalBinding()

2018-10-21 03:17:12 +02:00

v8_prof_polyfill.js

v8_prof_polyfill: remove unused catch bindings

2018-11-06 10:59:04 -05:00

v8_prof_processor.js

src,lib: move natives and constants to internalBinding()

2018-10-21 03:17:12 +02:00

validators.js

lib: extract validateNumber validator

2018-08-14 11:34:34 -04:00

worker.js

worker: remove delete MessagePort.prototype.hasRef

2018-10-13 19:27:25 -07:00

wrap_js_stream.js

tls: do not rely on 'drain' handlers in StreamWrap

2018-11-16 10:09:40 +01:00

readme.md

Internal Modules

The modules in lib/internal are intended for internal use in Node.js core only, and are not accessible with require() from user modules. These modules can be changed at any time. Reliance on these modules outside of core is not supported in any way.