e5192b2Fix 4 bugs: prevent forward leaks when federation disabled, bind fetch results, continue gossip batches on error, fork network I/O to avoid blocking responsesiko7 months ago 93a36beHandle federation fetch errors and simplify presence checking logiciko7 months ago 87be4d9Fix traverse bug in retryPendingForwards and block numeric IP addresses in SSRF checksiko7 months ago 3d339cbFix three SSRF bypasses in isBadServerName IP prefix checksiko7 months ago 2cefad7Fix sendToEach missing recursion and safeCompareLoop timing leakiko7 months ago 2f6cb27Fix three security bugs: safeCompare, VerifyAuth gossip filtering, and lookupSession collision handlingiko7 months ago 35cfa8dFix session token timing side channel and ackedIds capacity violation in server.knotiko7 months ago 46543dbAdd missing `in` keywords to let-bindings and parenthesize negative literals in server.knotiko7 months ago a263102Fix four security and correctness bugs in server.knot: safeCompareLoop constant-time comparison for strings >256 chars, server name normalization before length validation DoS, backgroundPrune recursion stack growth, and cloud metadata/mDNS hostname SSRFiko7 months ago 013d6d4Fix five security and correctness bugs in server.knot: AckMessages eviction gated on auth, safeCompareLoop constant-time for secrets >256 chars, broadcastOfflineGossip TTL floor for short-lived entries, verifyFederationAuth constant-time when disabled, evictOldestAckedIds/pollOnce union dedup handlingiko7 months ago 918fbd2Fix four bugs: AckMessages federation ack deduplication, VerifyAuth challenge clearing, session cap global eviction, and offline timestamp clampingiko7 months ago 05d753cFix six bugs: sendBatchedGossip per-server batching, broadcastOfflineGossip timestamps, ReqChallenge global eviction, LookupPresence scan efficiency, ForwardMessage auth checks, AckMessages reinsertioniko7 months ago e8a6a25Fix five bugs: evictOldestAckedIds heap dedup tracking, sendBatchedGossip batch/rest split, AckMessages cascade eviction, ReqChallenge expired challenge counting, LookupPresence presence entry fallthroughiko7 months ago be521ddFix three bugs: safeCompare constant-time comparison, forward entry cleanup on success, and acked ID eviction with reinsertioniko7 months ago e01d161Fix five security and correctness bugs: safeCompare timing leak for secrets >256 chars, retryPendingForwards success cleanup, AckMessages eviction deduplication and capacity capping, and RecvGossip offline timestamp tie-breakingiko7 months ago fa38fa7Fix four bugs: SendMessage mailbox full, evicted acks retry, RecvGossip trust check expiryiko7 months ago