Conversation
Multiple stability, security, and correctness improvements: - Add request-boundary middleware enforcing header-size caps and rejecting Transfer-Encoding to avoid ambiguous framing; include JSON 413/400 responses for oversized/invalid requests. - Harden ChanNet: validate reply author/content lengths, accept optional stable UUID message_id for idempotency, compute/record replay tokens, map DB contention to 503 with Retry-After, and tighten export/import error handling. - Restrict gateway snapshots/exports to exportable boards only (public/post_password) and update related snapshot code and tests. - Add --data-dir CLI/config support with safe resolution and helper to configure before CONFIG access; update docs (README/SETUP). - Improve DB pool/PRAGMA timeouts and propagate busy conditions as AppError::DbBusy; set Retry-After headers on overload responses. - Make worker job completion persistence robust: transactional commits, retry/backoff for transient errors, bounded shutdown grace, and tests for recovery scenarios. - Various admin/backup/handler fixes (maintenance gating), TLS/plaintext listener behavior changes (tor backend, redirects), header limits, and many new unit/integration tests. - CI/cargo-audit tweaks, small dependency bumps and .gitignore updates. These changes aim to make networking, federation, background jobs, and operational deployment more robust and secure.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.