Commit Graph

91 Commits

Author SHA1 Message Date
Wesley Miaw
65855a143a Expand CORS test script to all other supported request types.
Explicitly check for 403 Forbidden, instead of allowing tests to pass for other HTTP status codes.
2020-07-01 17:37:28 -07:00
Wesley Miaw
dbc6d3d9a7 Make sure to check the origin header against the authorized list for all requests. 2020-07-01 12:32:02 -07:00
Wesley Miaw
72339c2e0c Merge pull request #30 from Netflix/https-cors
Restrict "CORS" to HTTPS and a full hostname match, as well as to other schemes with a full origin match. Wildcard matching of HTTPS subdomains is supported, and there is limited support for wildcard matching in other schemes.
2020-06-17 14:58:36 -07:00
Wesley Miaw
9c95539a7e Allow wildcard matches for non-https schemes of the form scheme://* and
scheme:*.
2020-06-12 18:24:27 -07:00
Wesley Miaw
d789ef37ff Allow subdomain wildcards to be specified for CORS origin headers using https.
Restrict default build to acceptable Netflix and YouTube origin headers; created new debug makefile target for full whitelist testing.
2020-06-02 17:19:53 -07:00
Wesley Miaw
e82bda0149 Allow ORIGIN header values from other schemes to be accepted; in particular
accept the package: scheme used by some mobile device clients. The HTTPS
scheme is still validated specially, to account for port numbers.
2020-05-19 16:25:34 -07:00
Wesley Miaw
df63f0e6af Require CORS Origin header to use https:// and match the entire hostname.
Also require the port number to match if specified in the accepted origins
list.
2020-03-27 15:45:23 -07:00
kemorrisnf
e7ccaec8ae Update Changelog v2.2.0 2019-10-11 14:55:48 -07:00
Wesley Miaw
6d4cd0f618 Merge pull request #25 from Netflix/memory-fixes
Memory Fixes
2019-10-08 13:56:01 -07:00
Wesley Miaw
06d9ef593a Merge branch 'master' into memory-fixes 2019-10-07 17:48:18 -07:00
Wesley Miaw
fec0095372 Merge branch 'documentation' into memory-fixes 2019-10-07 14:40:59 -07:00
Wesley Miaw
45477e443e Add to and improve upon the DIAL server unit tests. 2019-10-07 14:39:00 -07:00
Wesley Miaw
96786e4545 Add a Makefile target for the DIAL server with address sanitization (ASAN) turned on. 2019-10-07 14:38:39 -07:00
Wesley Miaw
93756a84ea Reject HTTP requests with an invalid (e.g. negative) Content-Length header value.
Make sure to allocate enough memory in buffers for the operations they are used for, and to check/enforce buffer sizes when performing those memory operations.
Properly allocate and free memory.
Make a best effort at allocating memory for the network hardware address (remove code for Apple platforms).
Try to consume all of the remaining content if a valid Content-Length header was provided.
Check for success when attempting to acquire mutexes.
2019-10-07 14:38:16 -07:00
Wesley Miaw
8c13345a4d Remove unused files LinuxInterfaces.c and LinuxInterfaces.h. 2019-10-07 14:33:21 -07:00
Wesley Miaw
5dc0f40b2f Add/improve function documentation and update copyright information. 2019-10-07 14:28:40 -07:00
kemorrisnf
b9a9832604 Merge pull request #24 from kannsky/master
Fix regular expression for appUrl.replace.
2019-09-30 15:49:47 -07:00
cparikh@netflix.com
bfde146144 Fix for - UncheckedBounds: mongoose.c via unchecked type on content-length header 2019-06-18 10:09:38 -07:00
이윤혁/연구원/TV Contents Service팀(yunhyeok.lee@lge.com)
c8d649deec Fix regular expression for appUrl.replace. This is because, according to
dial document, there is no mention of '/' behind of IP Address/Port/apps
2019-05-09 15:20:58 +09:00
kemorrisnf
d1b1aa2636 Merge pull request #22 from Netflix/2.2
Add NodeJS tests for 2.2 version of spec
2018-10-29 12:07:40 -07:00
Chintan Parikh
84c3da1ac7 Merge pull request #21 from kemorrisnf/master
Add nodejs tests to verify new v2.2 functionality
2018-10-29 10:33:05 -07:00
Chintan Parikh
9bddab3b38 Merge pull request #19 from schneiderl/master
Fixed typo at readme
2018-10-29 10:32:35 -07:00
Chintan Parikh
01d2a493d1 Merge pull request #20 from Netflix/2.2
Introduce system app
2018-10-29 10:32:17 -07:00
mdaftari
3e6d3981ac Introduce a command line option to pass sleep password.
And fix return code for "launching" system app.
2018-10-26 15:22:08 -07:00
Kevin Morris
ea691d1c4b Check that 403 is returned when DIAL launch of the System app is attempted. 2018-10-25 08:50:00 -07:00
Kevin Morris
b541041ea1 Adding tests for v2.2 DIAL spec. 2018-10-24 17:07:46 -07:00
mdaftari
231dd4e462 Introduce system app
Implementation as per spec

Update DIAL version
2018-10-17 12:05:51 -07:00
Lucas Gabriel Schneider
f7be2aa42f Update README.md 2018-10-06 18:41:49 -03:00
Chintan Parikh
9265692ad0 Fix mac address is corrupted on OSX. 2017-12-26 21:26:45 -08:00
Chintan Parikh
46a92967a5 Fix for "sendto: Can't assign requested address" error on OSx.
Bind to INADDR_ANY for UDP multicast message, only for OSX.
2017-12-26 21:20:54 -08:00
Chintan Parikh
ac3e488924 Compile DIAL client and server for macOS.
Changes:
* Added method to get mac and ip address for OSX. Current Linux method
of query via SIOCGIFCONF doesn't work. Added code to read via getifaddrs() API.
* Put non OSX specific code under #ifdef flags.
* Removed few linker libraries which are not required (lcares and lrt).
* Fixed many warnings.

Tested on: OSX 10.12
2017-12-26 21:16:24 -08:00
Chintan Parikh
fc267fac62 Fix memory leak in dial data. Thanks @vignyzheng for pointing this. 2017-12-23 16:05:33 -08:00
Chintan Parikh
7ba715a54e Adding code tags in README 2017-10-04 06:50:41 -07:00
Chintan Parikh
c1ed839cfb Updated README with additional documentation for dial website and
added markdown tags.
2017-10-04 06:47:48 -07:00
Chintan Parikh
eb89f3cbd3 Fix more memory leak issues in dial_server.c 2017-10-02 21:23:15 -07:00
Chintan Parikh
e902089402 Replace unsafe strcpy with strncpy.
Valgrind is happy now.
2017-10-02 16:28:39 -07:00
Chintan Parikh
4b8f7637b1 Fix memory leak in dial_data. 2017-10-02 15:25:03 -07:00
Jianchuan (J.C.) Li
50f7a5085d Merge pull request #13 from Netflix/cparikh/fixbuild
Fix build errors on Ubuntu Xenial 64 bit.
2017-10-02 12:51:22 -07:00
Chintan Parikh
dcb66b3641 Fix build errors on Ubuntu Xenial 64 bit.
Add -fPIC flag for building the lib, also add -Wl,--allow-shlib-undefined
in the client LDFLAGS.
2017-10-02 10:47:15 -07:00
Shruti Ranganathan Jothi
e5663f3941 adding manual mode test and stress test 2017-03-09 10:44:01 -08:00
Shruti Ranganathan Jothi
1f5c5454f2 adding logging for js tests 2017-03-08 19:30:02 -08:00
Shruti Ranganathan Jothi
b0061b88ad ability to write logs of test run to a file for nodejs tests 2017-03-08 16:28:28 -08:00
Shruti Ranganathan Jothi
11e4eaf2ac rectify error in sending clientDialVer in application status query 2017-03-08 12:57:50 -08:00
Shruti Ranganathan Jothi
6a0edc87dc Removed some test workarounds and updated README 2017-03-08 10:56:39 -08:00
Shruti Ranganathan Jothi
8e322de983 use yargs to get commandline params for nodejs tests 2017-03-08 10:33:36 -08:00
Shruti Ranganathan Jothi
ac26da16e2 use sprintf-js to format console logs 2017-03-08 09:58:27 -08:00
jcli
44f1acb300 jira SDK-5322: DIAL client that supports 2.1 and higher SHOULD include a clientDialVer query parameter while querying application status 2017-03-05 13:26:16 -08:00
jcli
f686fd9a19 jira SDK-5325: Server returns 404 when client requests to hide Netflix when it is already in hidden state 2017-03-05 11:26:42 -08:00
jcli
692a9c2ce8 jira SDK-5324: DIAL server not considering http request headers in case-insensitive manner 2017-03-05 11:10:31 -08:00
jcli
c7a3afa8a4 Jira SDK-5323, change MIME type from application/xml to text/xml 2017-03-05 10:57:07 -08:00