haraka / Haraka / 33943740760

71%

Build Type

push

github

Committed by web-flow

Commit Message

harden auth plugins against prototype pollution (#3615)

- fix(connection): bound synchronous recursion
- fix(auth_proxy): don't mutate hosts array
- fix(security): preserve dot-stuffing on relay
- fix(security): block prototype-chain lookups
- fix(security): harden against prototype pollution:
  - auth_flat_file, auth_vpopmail, lmtp, smtp_forward
- change(auth_proxy): load shared tls_socket
- fix(auth_base): read the config set in the .ini
- deps(several): bump to latest
- doc(CoreConfig): update stun docs #3613

Coverage Stats

1762 of 2286 branches covered (77.08%)

52 of 65 new or added lines in 12 files covered. (80.0%)

111 existing lines in 3 files now uncovered.

7631 of 10767 relevant lines covered (70.87%)

27.82 hits per line