Skip to content

v1.3.4

Pre-release
Pre-release

Choose a tag to compare

@gittiver gittiver released this 07 Sep 13:43
· 2 commits to master since this release

Safety Fixes

[fixed: WebSocket fragmented messages bypass the configured maximum pa…]
[json parsers parse depth limited to 1024 to prevent stack overflow]
[fixed the directory traversal]
[solution for non encoded second '/' and testcase based on POC]
[fixed handling websockets handle_upgrade in case of request completed…]

What's Changed

New Contributors

Full Changelog: v1.3.3...v1.3.4