Skip to content

v0.7.17

Choose a tag to compare

@ggoodman ggoodman released this 03 Jun 17:02
c1fa20a

Fixes DNS-derived HTTP authority matching for registry and CDN responses that return usable IPv4 addresses outside the primary answer list.

conn.matchHttp(...) can now match authorities resolved through accepted DNS responses where a queried hostname follows a CNAME chain and the corresponding A record is supplied in the DNS additional section. The authority remains trusted DNS metadata; Sandbox still does not infer match authority from HTTP Host headers.

This release also adds e2e coverage for registry.npmjs.org-style multi-answer DNS responses and CNAME/additional-section address responses.