Commit Graph

22 Commits

Author SHA1 Message Date
Wesley Miaw
dbc6d3d9a7 Make sure to check the origin header against the authorized list for all requests. 2020-07-01 12:32:02 -07:00
Wesley Miaw
9c95539a7e Allow wildcard matches for non-https schemes of the form scheme://* and
scheme:*.
2020-06-12 18:24:27 -07:00
Wesley Miaw
d789ef37ff Allow subdomain wildcards to be specified for CORS origin headers using https.
Restrict default build to acceptable Netflix and YouTube origin headers; created new debug makefile target for full whitelist testing.
2020-06-02 17:19:53 -07:00
Wesley Miaw
e82bda0149 Allow ORIGIN header values from other schemes to be accepted; in particular
accept the package: scheme used by some mobile device clients. The HTTPS
scheme is still validated specially, to account for port numbers.
2020-05-19 16:25:34 -07:00
Wesley Miaw
df63f0e6af Require CORS Origin header to use https:// and match the entire hostname.
Also require the port number to match if specified in the accepted origins
list.
2020-03-27 15:45:23 -07:00
Wesley Miaw
fec0095372 Merge branch 'documentation' into memory-fixes 2019-10-07 14:40:59 -07:00
Wesley Miaw
93756a84ea Reject HTTP requests with an invalid (e.g. negative) Content-Length header value.
Make sure to allocate enough memory in buffers for the operations they are used for, and to check/enforce buffer sizes when performing those memory operations.
Properly allocate and free memory.
Make a best effort at allocating memory for the network hardware address (remove code for Apple platforms).
Try to consume all of the remaining content if a valid Content-Length header was provided.
Check for success when attempting to acquire mutexes.
2019-10-07 14:38:16 -07:00
Wesley Miaw
8c13345a4d Remove unused files LinuxInterfaces.c and LinuxInterfaces.h. 2019-10-07 14:33:21 -07:00
Wesley Miaw
5dc0f40b2f Add/improve function documentation and update copyright information. 2019-10-07 14:28:40 -07:00
mdaftari
231dd4e462 Introduce system app
Implementation as per spec

Update DIAL version
2018-10-17 12:05:51 -07:00
Chintan Parikh
fc267fac62 Fix memory leak in dial data. Thanks @vignyzheng for pointing this. 2017-12-23 16:05:33 -08:00
Chintan Parikh
eb89f3cbd3 Fix more memory leak issues in dial_server.c 2017-10-02 21:23:15 -07:00
jcli
44f1acb300 jira SDK-5322: DIAL client that supports 2.1 and higher SHOULD include a clientDialVer query parameter while querying application status 2017-03-05 13:26:16 -08:00
jcli
f686fd9a19 jira SDK-5325: Server returns 404 when client requests to hide Netflix when it is already in hidden state 2017-03-05 11:26:42 -08:00
jcli
692a9c2ce8 jira SDK-5324: DIAL server not considering http request headers in case-insensitive manner 2017-03-05 11:10:31 -08:00
jcli
c7a3afa8a4 Jira SDK-5323, change MIME type from application/xml to text/xml 2017-03-05 10:57:07 -08:00
Max von Hippel
8383f8e871 Fix double ds_unlock call per reported issue.
Got rid of double ds_unlock call.
2016-12-19 21:21:12 -07:00
jcli
64713d9679 Added app manager IPC interface. Updated verions to 2.1 2016-07-28 18:01:57 -07:00
jcli
f0584404e2 updated hide 2016-07-28 18:00:20 -07:00
jcli
c4c877da81 added hide handling 2016-07-28 18:00:20 -07:00
jcli
2477615a40 dial spec 2.0 2015-10-20 16:34:36 -07:00
jcli
3454a59e99 dial spec 1.7 2015-10-20 16:26:28 -07:00