54 Commits

Author SHA1 Message Date
Wesley Miaw
65855a143a Expand CORS test script to all other supported request types.
Explicitly check for 403 Forbidden, instead of allowing tests to pass for other HTTP status codes.
2020-07-01 17:37:28 -07:00
Wesley Miaw
dbc6d3d9a7 Make sure to check the origin header against the authorized list for all requests. 2020-07-01 12:32:02 -07:00
Wesley Miaw
9c95539a7e Allow wildcard matches for non-https schemes of the form scheme://* and
scheme:*.
2020-06-12 18:24:27 -07:00
Wesley Miaw
d789ef37ff Allow subdomain wildcards to be specified for CORS origin headers using https.
Restrict default build to acceptable Netflix and YouTube origin headers; created new debug makefile target for full whitelist testing.
2020-06-02 17:19:53 -07:00
Wesley Miaw
e82bda0149 Allow ORIGIN header values from other schemes to be accepted; in particular
accept the package: scheme used by some mobile device clients. The HTTPS
scheme is still validated specially, to account for port numbers.
2020-05-19 16:25:34 -07:00
Wesley Miaw
df63f0e6af Require CORS Origin header to use https:// and match the entire hostname.
Also require the port number to match if specified in the accepted origins
list.
2020-03-27 15:45:23 -07:00
Wesley Miaw
fec0095372 Merge branch 'documentation' into memory-fixes 2019-10-07 14:40:59 -07:00
Wesley Miaw
45477e443e Add to and improve upon the DIAL server unit tests. 2019-10-07 14:39:00 -07:00
Wesley Miaw
96786e4545 Add a Makefile target for the DIAL server with address sanitization (ASAN) turned on. 2019-10-07 14:38:39 -07:00
Wesley Miaw
93756a84ea Reject HTTP requests with an invalid (e.g. negative) Content-Length header value.
Make sure to allocate enough memory in buffers for the operations they are used for, and to check/enforce buffer sizes when performing those memory operations.
Properly allocate and free memory.
Make a best effort at allocating memory for the network hardware address (remove code for Apple platforms).
Try to consume all of the remaining content if a valid Content-Length header was provided.
Check for success when attempting to acquire mutexes.
2019-10-07 14:38:16 -07:00
Wesley Miaw
8c13345a4d Remove unused files LinuxInterfaces.c and LinuxInterfaces.h. 2019-10-07 14:33:21 -07:00
Wesley Miaw
5dc0f40b2f Add/improve function documentation and update copyright information. 2019-10-07 14:28:40 -07:00
cparikh@netflix.com
bfde146144 Fix for - UncheckedBounds: mongoose.c via unchecked type on content-length header 2019-06-18 10:09:38 -07:00
Chintan Parikh
84c3da1ac7 Merge pull request #21 from kemorrisnf/master
Add nodejs tests to verify new v2.2 functionality
2018-10-29 10:33:05 -07:00
mdaftari
3e6d3981ac Introduce a command line option to pass sleep password.
And fix return code for "launching" system app.
2018-10-26 15:22:08 -07:00
Kevin Morris
ea691d1c4b Check that 403 is returned when DIAL launch of the System app is attempted. 2018-10-25 08:50:00 -07:00
Kevin Morris
b541041ea1 Adding tests for v2.2 DIAL spec. 2018-10-24 17:07:46 -07:00
mdaftari
231dd4e462 Introduce system app
Implementation as per spec

Update DIAL version
2018-10-17 12:05:51 -07:00
Chintan Parikh
9265692ad0 Fix mac address is corrupted on OSX. 2017-12-26 21:26:45 -08:00
Chintan Parikh
46a92967a5 Fix for "sendto: Can't assign requested address" error on OSx.
Bind to INADDR_ANY for UDP multicast message, only for OSX.
2017-12-26 21:20:54 -08:00
Chintan Parikh
ac3e488924 Compile DIAL client and server for macOS.
Changes:
* Added method to get mac and ip address for OSX. Current Linux method
of query via SIOCGIFCONF doesn't work. Added code to read via getifaddrs() API.
* Put non OSX specific code under #ifdef flags.
* Removed few linker libraries which are not required (lcares and lrt).
* Fixed many warnings.

Tested on: OSX 10.12
2017-12-26 21:16:24 -08:00
Chintan Parikh
fc267fac62 Fix memory leak in dial data. Thanks @vignyzheng for pointing this. 2017-12-23 16:05:33 -08:00
Chintan Parikh
eb89f3cbd3 Fix more memory leak issues in dial_server.c 2017-10-02 21:23:15 -07:00
Chintan Parikh
e902089402 Replace unsafe strcpy with strncpy.
Valgrind is happy now.
2017-10-02 16:28:39 -07:00
Chintan Parikh
4b8f7637b1 Fix memory leak in dial_data. 2017-10-02 15:25:03 -07:00
Chintan Parikh
dcb66b3641 Fix build errors on Ubuntu Xenial 64 bit.
Add -fPIC flag for building the lib, also add -Wl,--allow-shlib-undefined
in the client LDFLAGS.
2017-10-02 10:47:15 -07:00
Shruti Ranganathan Jothi
e5663f3941 adding manual mode test and stress test 2017-03-09 10:44:01 -08:00
Shruti Ranganathan Jothi
1f5c5454f2 adding logging for js tests 2017-03-08 19:30:02 -08:00
Shruti Ranganathan Jothi
b0061b88ad ability to write logs of test run to a file for nodejs tests 2017-03-08 16:28:28 -08:00
Shruti Ranganathan Jothi
11e4eaf2ac rectify error in sending clientDialVer in application status query 2017-03-08 12:57:50 -08:00
Shruti Ranganathan Jothi
6a0edc87dc Removed some test workarounds and updated README 2017-03-08 10:56:39 -08:00
Shruti Ranganathan Jothi
8e322de983 use yargs to get commandline params for nodejs tests 2017-03-08 10:33:36 -08:00
Shruti Ranganathan Jothi
ac26da16e2 use sprintf-js to format console logs 2017-03-08 09:58:27 -08:00
jcli
44f1acb300 jira SDK-5322: DIAL client that supports 2.1 and higher SHOULD include a clientDialVer query parameter while querying application status 2017-03-05 13:26:16 -08:00
jcli
f686fd9a19 jira SDK-5325: Server returns 404 when client requests to hide Netflix when it is already in hidden state 2017-03-05 11:26:42 -08:00
jcli
692a9c2ce8 jira SDK-5324: DIAL server not considering http request headers in case-insensitive manner 2017-03-05 11:10:31 -08:00
jcli
c7a3afa8a4 Jira SDK-5323, change MIME type from application/xml to text/xml 2017-03-05 10:57:07 -08:00
Shruti Ranganathan Jothi
2771af310a update README 2017-03-01 10:05:07 -08:00
Shruti Ranganathan Jothi
fd58106e7f ability to run tests standalone 2017-02-28 17:29:57 -08:00
Shruti Ranganathan Jothi
3966c316ac make tests application agnostic 2017-02-28 17:21:35 -08:00
Shruti Ranganathan Jothi
f6c369ca3c update package.json and .gitignore 2017-02-28 11:54:30 -08:00
Shruti Ranganathan Jothi
7ecd7c2ad0 committing node js tests for netflix app with DIAL 2.1 2017-02-28 11:24:36 -08:00
Shruti Ranganathan Jothi
53687736d9 new directory for nodejs tests 2017-02-28 11:17:08 -08:00
Max von Hippel
8383f8e871 Fix double ds_unlock call per reported issue.
Got rid of double ds_unlock call.
2016-12-19 21:21:12 -07:00
jcli
5a6ffa5da7 turned netflix callbacks into shared library 2016-09-24 11:06:34 -07:00
jcli
2a7e391a1b increased the ipc buffer and fixed the curl post size 2016-09-21 22:08:01 -07:00
jcli
8f6171ffc1 remove unused define 2016-07-28 18:12:21 -07:00
jcli
64713d9679 Added app manager IPC interface. Updated verions to 2.1 2016-07-28 18:01:57 -07:00
jcli
474789340b added hooks for netflix app manager 2016-07-28 18:00:20 -07:00
jcli
f0584404e2 updated hide 2016-07-28 18:00:20 -07:00