Philip Monk
7b7e9e3104
clay: fix requests for strange cares over ames
...
Four changes:
- implement +validate-u to allow %u requests over the network
- make +validate-x use our local marks to make %x requests generally
work over the network
- in +start-request, if a foreign ship is making a request that we
shouldn't send over the network, ignore it. This closes a DOS vector.
- in +duce, if we're about to make a request to a foreign ship which
they won't be able to answer, crash the event.
Combined, these fix many of the common cases of weirdness around foreign
clay requests. Notably absent is a fix for reading `%a` across the
network, which I still maintain should happen against the foreign
hoon/zuse.
fixes #4834
see also #4307
2021-04-28 23:24:15 -07:00
Liam Fitzgerald
b46f2e24e6
glob: update to 0v3.g6u13.haedt.jt4hd.61ek5.6t30q
2021-04-22 18:00:19 +10:00
Liam Fitzgerald
268677e744
metadata-store: prevent infinite loop
2021-04-20 16:15:04 +10:00
Liam Fitzgerald
e63beeb271
glob: update to 0v4.m6t09.ego4v.atjn3.mn5p4.mchad
2021-04-20 15:06:10 +10:00
Liam Fitzgerald
e0a12bd7dd
Merge remote-tracking branch 'origin/la/no-data-contact'
2021-04-20 14:53:18 +10:00
Liam Fitzgerald
1a4b2699ca
Merge remote-tracking branch 'origin/la/md-fix'
2021-04-20 14:52:57 +10:00
Liam Fitzgerald
f038176169
Merge remote-tracking branch 'origin/la/font-display-swap'
2021-04-20 14:52:41 +10:00
Logan Allen
fa59f87dc5
contact-store: disallow data: urls from being added
2021-04-19 14:38:33 -05:00
Logan Allen
dea3fd6e8d
metadata-store: actually fix it, strongly type the action sent to %pull-hook to prevent moronic errors
2021-04-15 13:05:00 -05:00
Liam Fitzgerald
d37ad069d7
metadata-store: fix OTA 2
2021-04-13 09:27:59 +00:00
Liam Fitzgerald
ec41003a86
metadata-store: fix broken OTA
2021-04-13 16:33:21 +10:00
Liam Fitzgerald
5062c1f683
glob: update to 0v6.qafur.17301.j8obh.vbepn.7tq3l
2021-04-13 16:12:38 +10:00
Liam Fitzgerald
59c1a7356e
Merge remote-tracking branch 'origin/release/next-js'
2021-04-13 16:00:03 +10:00
Liam Fitzgerald
bc84cfa3fd
Merge branch 'lf/remove-tag'
2021-04-13 15:59:51 +10:00
Liam Fitzgerald
85b580f922
Merge remote-tracking branch 'origin/la/fix-feed'
2021-04-13 15:59:26 +10:00
Liam Fitzgerald
ff3abff800
Merge branch 'lf/lowercase-http'
2021-04-13 15:58:52 +10:00
Liam Fitzgerald
64a62e9f85
Merge branch 'lf/fix-sane'
2021-04-13 15:58:23 +10:00
Liam Fitzgerald
1e7c5dff59
file-server: lowercase headers for http2
2021-04-13 15:19:08 +10:00
Logan Allen
f733f68008
metadata-store: subscribe to all feeds that got missed in the upgrade
2021-04-09 21:20:27 +00:00
Logan Allen
5d16911f69
eyre: use font-display:swap; in login page
2021-04-09 16:02:55 +00:00
Liam Fitzgerald
1c939b4861
graph-validator-post: enable unreads and notifications
2021-04-08 16:05:17 +10:00
Liam Fitzgerald
baf365b63b
glob: update to 0v4.7tk5q.9ha4l.tbmji.fvkno.s9pfq
2021-04-08 15:20:20 +10:00
Liam Fitzgerald
8b5a69a56f
Merge remote-tracking branch 'origin/la/warm-marks'
2021-04-08 15:13:04 +10:00
Logan Allen
59ece927c2
observe-hook: style fixes as per joe's review
2021-04-07 12:19:26 -05:00
Logan Allen
c7e4291d6d
observe-hook: ask for next case as opposed to now.bowl when using %next, unless riot is null. small cleanup
2021-04-06 18:51:32 -05:00
Logan Allen
faf1f83e8f
graph-store: remove obsoleted code necessary to keep graph marks warm
2021-04-06 17:21:09 -05:00
Logan Allen
c6616a7e9d
observe-hook: listen for mark additions
2021-04-06 16:47:17 -05:00
Logan Allen
744b9f2334
observe-hook: remove debugging code
2021-04-06 16:19:22 -05:00
Logan Allen
5f14b21636
observe-hook: warm up caches in +on-init also, not just +on-load
2021-04-06 16:02:18 -05:00
Logan Allen
01890fa040
observe-hook: upgrade to keep marks warm
2021-04-06 15:47:57 -05:00
Jōshin
4aa9bba5b3
gcp: isConfigured doesn't touch store
...
Makes the thread return a simple boolean; almost as simple as just
returning %.y or %.n.
gcpManager now stores whether GCP is configured as a private variable.
Also fixes some type errors in gcp.
2021-04-06 19:08:53 +00:00
Liam Fitzgerald
31717ae908
sane: don't kick unsubscribed
...
Fixes urbit/landscape#735
2021-04-06 11:47:48 +10:00
Liam Fitzgerald
fbd85abf4e
Merge remote-tracking branch 'origin/master' into lf/push-hook-unver
2021-04-03 12:54:35 +11:00
Liam Fitzgerald
b6a758b1f9
pull-hook: noop on unsupported, unversioned facts
...
Pull-hook side of the previous change to push-hook
(479fbfd798
2021-04-03 10:45:22 +10:00
Liam Fitzgerald
f1710c2f03
metadata: restore historical marks
2021-04-03 10:33:31 +10:00
janeway
6ed5ccbc4e
glob: update to 0v2i7ds.j99ka.5dpja.pef1e.b04e0
2021-04-02 17:02:40 -04:00
Logan Allen
21b1119c74
metadata lib: parse right
2021-04-02 20:35:25 +00:00
Logan Allen
6fbbe2ceb7
metadata-store lib: make config encode/decode invertible
2021-04-02 19:18:59 +00:00
Liam Fitzgerald
ea5dc47eca
glob: update to 0v2.utsjo.ghhil.f0qh8.h5633.ffi8u
2021-04-03 01:04:52 +10:00
Liam Fitzgerald
f27fa5b0f3
metadata: fix updating graph metadata
2021-04-02 23:23:31 +10:00
Liam Fitzgerald
01960286d0
push-hook: do not pass facts to unsupported, unversioned subs
2021-04-02 22:14:15 +10:00
Liam Fitzgerald
479fbfd798
push-hook: noop on unversioned, unsupported watches
...
Mainnet is currently experiencing undue load due to a watch-kick loop.
If the watch is unsupported, it will be kicked due to a mark mismatch,
which will be interpreted by the unversioned hooks as a network pressure
kick, prompting a resub and continuing the loop. Instead, we now no-op
on unversioned, unsupported watches, waiting for the subscriber to
rewatch after it processes the versioning OTA. This will silently break
groups for the subscriber until the reach the latest OTA, but is
preferable to nacking, and kicking them permanently
2021-04-02 20:38:22 +10:00
Liam Fitzgerald
f322360dca
glob: update to 0v5.ancat.1qorl.7rea9.55ltu.2r24p
2021-04-02 15:38:35 +10:00
Liam Fitzgerald
eb131e64a8
metadata: prevent crash
2021-04-02 15:24:26 +10:00
Liam Fitzgerald
4d659be7cf
metadata: fix JSON conversions
2021-04-02 14:35:41 +10:00
Liam Fitzgerald
8d455eeac1
glob: update to 0v6.i86m5.f4rs9.l09fu.a7d86.v00sl
2021-04-02 13:27:10 +10:00
Liam Fitzgerald
5071ca309e
Merge remote-tracking branch 'origin/release/next-userspace'
2021-04-02 13:13:16 +10:00
Liam Fitzgerald
f2a7617376
Post: tweak permissions to match designs
2021-04-02 12:11:24 +10:00
Liam Fitzgerald
578924049d
Merge branch 'release/next-userspace' into lf/post-parent
2021-04-02 12:06:16 +10:00
Liam Fitzgerald
615be57b7b
Post: refactor permission variations
2021-04-02 11:48:09 +10:00
