Mirrors/libwebsockets
1
0
Fork 0
mirror of https://github.com/warmcat/libwebsockets.git synced 2025-03-30 00:00:16 +01:00
Code Issues Releases Wiki Activity
libwebsockets/READMEs
History
Andy Green b318877cd9 adopt: allow associated accepted vhost connections to specific role 
Normalize the vhost options around optionally handling noncompliant
traffic at the listening socket for both non-tls and tls cases.

By default everything is as before.

However it's now possible to tell the vhost to allow noncompliant
connects to fall back to a specific role and protocol, both set
by name in the vhost creation info struct.

The original vhost flags allowing http redirect to https and
direct http serving from https server (which is a security
downgrade if enabled) are cleaned up and tested.

A minimal example minimal-raw-fallback-http-server is added with
switches to confirm operation of all the valid possibilities (see
the readme on that).
2018-12-01 11:05:59 +08:00
..
mainpage.md libwebsockets.h: split out into a dir of sub-includes included by libwebsockets.h 2018-09-11 18:27:59 +08:00
README-plugin-sshd-base.md Plugins: add ssh-base ssh server plugin 2017-10-16 16:59:57 +08:00
README.build.md boringssl: update 2018-11-23 10:52:39 +08:00
README.ci.md README.ci.md 2018-10-13 08:16:27 +08:00
README.coding.md adopt: allow associated accepted vhost connections to specific role 2018-12-01 11:05:59 +08:00
README.content-security-policy.md minimal examples: update for CSP best practices 2018-11-21 17:03:29 +08:00
README.contributing.md README.contributing.md 2018-10-13 08:16:27 +08:00
README.esp32.md esp32: map basic auth to nvs 2018-02-24 08:14:17 +08:00
README.generic-sessions.md clean up top level of project 2017-09-27 08:24:05 +08:00
README.generic-table.md clean up top level of project 2017-09-27 08:24:05 +08:00
README.lwsws.md adopt: allow associated accepted vhost connections to specific role 2018-12-01 11:05:59 +08:00
README.plugin-acme.md ACME client plugin 2017-12-01 11:37:35 +08:00
README.problems.md docs: cleanups 2018-11-21 17:03:29 +08:00
README.release-policy.md docs: release-policy README and pics 2018-11-14 08:57:29 +08:00
README.test-apps.md README.md: update in preparation for v3.1 2018-11-16 09:10:41 +08:00
README.unix-domain-reverse-proxy.md clean: general whitespace cleanup 2018-11-23 08:47:56 +08:00
README.vulnerability-reporting.md README.vulnerability-reporting.md 2018-10-13 08:16:27 +08:00
release-checklist v3.1.0 2018-11-23 11:30:56 +08:00

README.vulnerability-reporting.md

Vulnerability Reporting

If you become aware of an issue with lws that has a security dimension for users, please contact andy@warmcat.com by direct email.

Procedure for announcing vulnerability fixes

The problem and fixed versions will be announced on the libwebsockets mailing list and a note added to the master README.md.