pomerium / pomerium / 26584231509
52%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 717
Run time 2min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 45.756% (+0.004%) from 45.752%
26584231509

push

github

web-flow 
chore(deps): bump ws from 8.20.1 to 8.21.0 in /internal/acceptance/ws-server in the npm group (#6389)

Bumps the npm group in /internal/acceptance/ws-server with 1 update:
[ws](https://github.com/websockets/ws).

Updates `ws` from 8.20.1 to 8.21.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/websockets/ws/releases">ws's
releases</a>.</em></p>
<blockquote>
<h2>8.21.0</h2>
<h1>Features</h1>
<ul>
<li>Introduced the <code>maxBufferedChunks</code> and
<code>maxFragments</code> options (2b2abd45).</li>
</ul>
<h1>Bug fixes</h1>
<ul>
<li>Fixed a remote memory exhaustion DoS vulnerability (2b2abd45).</li>
</ul>
<p>A high volume of tiny fragments and data chunks could be sent by a
peer, using
modest network traffic, to crash a <code>ws</code> server or client due
to OOM.</p>
<pre lang="js"><code>import { WebSocket, WebSocketServer } from 'ws';
<p>const wss = new WebSocketServer({ port: 0 }, function () {
const data = Buffer.alloc(1);
const options = { fin: false };
const { port } = wss.address();
const ws = new WebSocket(<code>ws://localhost:${port}</code>);</p>
<p>ws.on('open', function () {
(function send() {
ws.send(data, options, function (err) {
if (err) return;
send();
});
})();
});</p>
<p>ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(<code>client close - code: ${code} reason:
${reason.toString()}</code>);
});
});</p>
<p>wss.on('connection', function (ws) {
ws.on('error', console.error);
ws.on('close', function (code, reason) {
console.log(<code>server close - code: ${code} reason:
${reason.toString()}</code>);
});
});
</code></pre></p>
<p>The vulnerability was responsibly disclosed and fixed by <a
href="https://github.com/Nadav0077">Nadav Magier</a>.</p>
<p>In vulnerable versions, the issue can be mitigated by lowering the
value of the
<code>maxPayload</code> option if possible.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://gi... (continued)

36917 of 80682 relevant lines covered (45.76%)

403.13 hits per line

Coverage Regressions

Lines Coverage ∆ File
4
90.91
 -3.64% pkg/fanout/receive.go
3
90.59
 -1.49% config/config_source.go
3
95.83
 -3.13% pkg/identity/manager/schedulers.go
2
48.12
 -0.36% internal/databroker/server_clustered_follower.go
2
89.19
 -5.41% pkg/fanout/fanout.go
2
88.52
 0.0% pkg/storage/postgres/postgres.go
1
75.41
 0.0% pkg/storage/postgres/registry.go
Jobs
ID Job ID Ran Files Coverage
1 26584231509.1 717
45.76
 GitHub Action Run
Source Files on build 26584231509