haraka / Haraka / 33952164489

71%

push

github

Release v3.3.4 (#3617)

- fix(security): refuse bare LF lines in DATA (#3616)
- fix(security): reject pipelining after DATA
- fix(connection): bound synchronous recursion
- fix(security): preserve dot-stuffing on relay
- fix(security): block prototype-chain lookups (#3615)
- fix(security): harden against prototype pollution:
  - auth_flat_file, auth_vpopmail, lmtp, smtp_forward
- fix(auth_proxy): don't mutate hosts array
- fix(auth_base): read the config set in the .ini
- change(auth_proxy): load shared tls_socket
- deps(several): bump to latest
- doc(CoreConfig): update stun docs (#3613)
  related to https://github.com/haraka/haraka-net-utils/pull/109

1781 of 2304 branches covered (77.3%)

7738 of 10840 relevant lines covered (71.38%)

28.15 hits per line