]> git.ipfire.org Git - thirdparty/FORT-validator.git/commit
Force RRDP files to be hosted by the same origin
authorAlberto Leiva Popper <ydahhrk@gmail.com>
Mon, 11 Mar 2024 20:22:26 +0000 (14:22 -0600)
committerAlberto Leiva Popper <ydahhrk@gmail.com>
Mon, 11 Mar 2024 20:22:26 +0000 (14:22 -0600)
commit958f3e4d50364e887b0a605113c9cce78cfa5cbb
tree8c2d0f7da883d2af114ea63a1b2fe635fc67dcf0
parent888d1e8541900e32dc1c9c24f3593e993853bc82
Force RRDP files to be hosted by the same origin

Reject RRDP snapshot and deltas if they're not hosted in the same origin
as the notification. Prevents malicious notifications from wasting other
servers' bandwidth.

First half of draft-spaghetti-sidrops-rrdp-same-origin-00.

Thanks to Job Snijders for reporting this.
src/rrdp.c
src/types/uri.c
src/types/uri.h
test/rrdp_test.c
test/types/uri_test.c