8000 Fix Symbol/Cache attacks by korny · Pull Request #149 · rubychan/coderay · GitHub
[go: up one dir, main page]
Skip to content

Fix Symbol/Cache attacks #149

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
korny merged 19 commits into from
Aug 23, 2013
Merged

Fix Symbol/Cache attacks #149

korny merged 19 commits into from
Aug 23, 2013

Conversation

@korny
Copy link
Member
@korny korny commented Jul 20, 2013

…to solve #148.

  • changelog

@ghost ghost assigned korny Jul 20, 2013
korny added 18 commits July 21, 2013 16:44
@korny
Merge branch 'master' into fix-cache-attack
b266cb6
@korny
no attack vector found
60afd68
@korny
don't dup @span_for_kinds hash keys
5cd7497
@korny
rename local variable
ee30738
@korny
prevent Symbol attack in Raydebug scanner
e254606
@korny
cleanup Plugin, don't use #to_sym anymore
8ee1c8d
@korny
no attack vector found
6ef7fa4
@korny
prevent Symbol attack in Debug scanner
2ab42c7
@korny
tweak Debug scanners again, introduce :unknown token kind
5d6bee7
@korny
FileType should guard against attacks here
368e053
@korny
no attack vector, there are only 4 cases
af04107
@korny
no attack vector, there are only 2 cases
e914007
@korny
cleanup
c3c70e0
@korny
avoid cache attack in Ruby scanner
65983f3 
(eg. using Unicode-delimited Fancy Strings)
@korny
no cache attacks possible, static input (CSS)
05f5a0e
@korny
limit HTML encoder span_for_kinds cache size
ee99242
@korny
changelog
4d472e2
@korny
more changelog
28c57a5
korny added a commit that referenced this pull request Aug 23, 2013
@korny
Merge pull request #149 from rubychan/fix-cache-attack
d9ee837 
Fix Symbol/Cache attacks
@korny korny merged commit d9ee837 into master Aug 23, 2013
@korny korny deleted the fix-cache-attack branch August 23, 2013 13:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@korny korny 52F1

Labels

None yet

Projects

None yet

Milestone

1.1

Development

Successfully merging this pull request may close these issues.

2 participants

@korny
0