shrub/pkg
Philip Monk 7b7e9e3104
clay: fix requests for strange cares over ames
Four changes:

- implement +validate-u to allow %u requests over the network
- make +validate-x use our local marks to make %x requests generally
  work over the network
- in +start-request, if a foreign ship is making a request that we
  shouldn't send over the network, ignore it.  This closes a DOS vector.
- in +duce, if we're about to make a request to a foreign ship which
  they won't be able to answer, crash the event.

Combined, these fix many of the common cases of weirdness around foreign
clay requests.  Notably absent is a fix for reading `%a` across the
network, which I still maintain should happen against the foreign
hoon/zuse.

fixes #4834
see also #4307
2021-04-28 23:24:15 -07:00
..
arvo clay: fix requests for strange cares over ames 2021-04-28 23:24:15 -07:00
docker-image docker: update documentation 2021-04-25 12:02:56 -04:00
ent build: rework all nix expressions to support hercules-ci builds 2020-10-27 13:55:49 +01:00
ge-additions build: rework all nix expressions to support hercules-ci builds 2020-10-27 13:55:49 +01:00
herb herb/lens: add utilites for import/export 2020-12-01 00:00:49 -08:00
hs urbit: bumps version to 1.5 2021-04-27 13:58:44 -07:00
interface GraphNotification: safe property access 2021-04-22 11:02:23 +10:00
libaes_siv build: rework all nix expressions to support hercules-ci builds 2020-10-27 13:55:49 +01:00
npm meta: enable package-lock on npm 2021-04-16 13:48:37 -04:00
urbit urbit: bumps version to 1.5 2021-04-27 13:58:44 -07:00