Commit Graph

54 Commits

Author SHA1 Message Date
Wesley Miaw 65855a143a Expand CORS test script to all other supported request types.
Explicitly check for 403 Forbidden, instead of allowing tests to pass for other HTTP status codes.
2020-07-01 17:37:28 -07:00
Wesley Miaw dbc6d3d9a7 Make sure to check the origin header against the authorized list for all requests. 2020-07-01 12:32:02 -07:00
Wesley Miaw 9c95539a7e Allow wildcard matches for non-https schemes of the form scheme://* and
scheme:*.
2020-06-12 18:24:27 -07:00
Wesley Miaw d789ef37ff Allow subdomain wildcards to be specified for CORS origin headers using https.
Restrict default build to acceptable Netflix and YouTube origin headers; created new debug makefile target for full whitelist testing.
2020-06-02 17:19:53 -07:00
Wesley Miaw e82bda0149 Allow ORIGIN header values from other schemes to be accepted; in particular
accept the package: scheme used by some mobile device clients. The HTTPS
scheme is still validated specially, to account for port numbers.
2020-05-19 16:25:34 -07:00
Wesley Miaw df63f0e6af Require CORS Origin header to use https:// and match the entire hostname.
Also require the port number to match if specified in the accepted origins
list.
2020-03-27 15:45:23 -07:00
Wesley Miaw fec0095372 Merge branch 'documentation' into memory-fixes 2019-10-07 14:40:59 -07:00
Wesley Miaw 45477e443e Add to and improve upon the DIAL server unit tests. 2019-10-07 14:39:00 -07:00
Wesley Miaw 96786e4545 Add a Makefile target for the DIAL server with address sanitization (ASAN) turned on. 2019-10-07 14:38:39 -07:00
Wesley Miaw 93756a84ea Reject HTTP requests with an invalid (e.g. negative) Content-Length header value.
Make sure to allocate enough memory in buffers for the operations they are used for, and to check/enforce buffer sizes when performing those memory operations.
Properly allocate and free memory.
Make a best effort at allocating memory for the network hardware address (remove code for Apple platforms).
Try to consume all of the remaining content if a valid Content-Length header was provided.
Check for success when attempting to acquire mutexes.
2019-10-07 14:38:16 -07:00
Wesley Miaw 8c13345a4d Remove unused files LinuxInterfaces.c and LinuxInterfaces.h. 2019-10-07 14:33:21 -07:00
Wesley Miaw 5dc0f40b2f Add/improve function documentation and update copyright information. 2019-10-07 14:28:40 -07:00
cparikh@netflix.com bfde146144 Fix for - UncheckedBounds: mongoose.c via unchecked type on content-length header 2019-06-18 10:09:38 -07:00
Chintan Parikh 84c3da1ac7 Merge pull request #21 from kemorrisnf/master
Add nodejs tests to verify new v2.2 functionality
2018-10-29 10:33:05 -07:00
mdaftari 3e6d3981ac Introduce a command line option to pass sleep password.
And fix return code for "launching" system app.
2018-10-26 15:22:08 -07:00
Kevin Morris ea691d1c4b Check that 403 is returned when DIAL launch of the System app is attempted. 2018-10-25 08:50:00 -07:00
Kevin Morris b541041ea1 Adding tests for v2.2 DIAL spec. 2018-10-24 17:07:46 -07:00
mdaftari 231dd4e462 Introduce system app
Implementation as per spec

Update DIAL version
2018-10-17 12:05:51 -07:00
Chintan Parikh 9265692ad0 Fix mac address is corrupted on OSX. 2017-12-26 21:26:45 -08:00
Chintan Parikh 46a92967a5 Fix for "sendto: Can't assign requested address" error on OSx.
Bind to INADDR_ANY for UDP multicast message, only for OSX.
2017-12-26 21:20:54 -08:00
Chintan Parikh ac3e488924 Compile DIAL client and server for macOS.
Changes:
* Added method to get mac and ip address for OSX. Current Linux method
of query via SIOCGIFCONF doesn't work. Added code to read via getifaddrs() API.
* Put non OSX specific code under #ifdef flags.
* Removed few linker libraries which are not required (lcares and lrt).
* Fixed many warnings.

Tested on: OSX 10.12
2017-12-26 21:16:24 -08:00
Chintan Parikh fc267fac62 Fix memory leak in dial data. Thanks @vignyzheng for pointing this. 2017-12-23 16:05:33 -08:00
Chintan Parikh eb89f3cbd3 Fix more memory leak issues in dial_server.c 2017-10-02 21:23:15 -07:00
Chintan Parikh e902089402 Replace unsafe strcpy with strncpy.
Valgrind is happy now.
2017-10-02 16:28:39 -07:00
Chintan Parikh 4b8f7637b1 Fix memory leak in dial_data. 2017-10-02 15:25:03 -07:00
Chintan Parikh dcb66b3641 Fix build errors on Ubuntu Xenial 64 bit.
Add -fPIC flag for building the lib, also add -Wl,--allow-shlib-undefined
in the client LDFLAGS.
2017-10-02 10:47:15 -07:00
Shruti Ranganathan Jothi e5663f3941 adding manual mode test and stress test 2017-03-09 10:44:01 -08:00
Shruti Ranganathan Jothi 1f5c5454f2 adding logging for js tests 2017-03-08 19:30:02 -08:00
Shruti Ranganathan Jothi b0061b88ad ability to write logs of test run to a file for nodejs tests 2017-03-08 16:28:28 -08:00
Shruti Ranganathan Jothi 11e4eaf2ac rectify error in sending clientDialVer in application status query 2017-03-08 12:57:50 -08:00
Shruti Ranganathan Jothi 6a0edc87dc Removed some test workarounds and updated README 2017-03-08 10:56:39 -08:00
Shruti Ranganathan Jothi 8e322de983 use yargs to get commandline params for nodejs tests 2017-03-08 10:33:36 -08:00
Shruti Ranganathan Jothi ac26da16e2 use sprintf-js to format console logs 2017-03-08 09:58:27 -08:00
jcli 44f1acb300 jira SDK-5322: DIAL client that supports 2.1 and higher SHOULD include a clientDialVer query parameter while querying application status 2017-03-05 13:26:16 -08:00
jcli f686fd9a19 jira SDK-5325: Server returns 404 when client requests to hide Netflix when it is already in hidden state 2017-03-05 11:26:42 -08:00
jcli 692a9c2ce8 jira SDK-5324: DIAL server not considering http request headers in case-insensitive manner 2017-03-05 11:10:31 -08:00
jcli c7a3afa8a4 Jira SDK-5323, change MIME type from application/xml to text/xml 2017-03-05 10:57:07 -08:00
Shruti Ranganathan Jothi 2771af310a update README 2017-03-01 10:05:07 -08:00
Shruti Ranganathan Jothi fd58106e7f ability to run tests standalone 2017-02-28 17:29:57 -08:00
Shruti Ranganathan Jothi 3966c316ac make tests application agnostic 2017-02-28 17:21:35 -08:00
Shruti Ranganathan Jothi f6c369ca3c update package.json and .gitignore 2017-02-28 11:54:30 -08:00
Shruti Ranganathan Jothi 7ecd7c2ad0 committing node js tests for netflix app with DIAL 2.1 2017-02-28 11:24:36 -08:00
Shruti Ranganathan Jothi 53687736d9 new directory for nodejs tests 2017-02-28 11:17:08 -08:00
Max von Hippel 8383f8e871 Fix double ds_unlock call per reported issue.
Got rid of double ds_unlock call.
2016-12-19 21:21:12 -07:00
jcli 5a6ffa5da7 turned netflix callbacks into shared library 2016-09-24 11:06:34 -07:00
jcli 2a7e391a1b increased the ipc buffer and fixed the curl post size 2016-09-21 22:08:01 -07:00
jcli 8f6171ffc1 remove unused define 2016-07-28 18:12:21 -07:00
jcli 64713d9679 Added app manager IPC interface. Updated verions to 2.1 2016-07-28 18:01:57 -07:00
jcli 474789340b added hooks for netflix app manager 2016-07-28 18:00:20 -07:00
jcli f0584404e2 updated hide 2016-07-28 18:00:20 -07:00