protocol-http1 0.20.0 → 0.21.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b49dc6301aa7d4aafb183cd1bea576bda5681e9d911245398c8c0c68ca38b1cc
-  data.tar.gz: b819f86f731d8e68391994e709318460a9c50b64fece83f398868a443faa3a72
+  metadata.gz: 66ce05a20db2c35943a45feab35afe95bf530ce562030741984025defb1f0b40
+  data.tar.gz: e3066206a22ad274cc28ac13369d330cff0b5bee1641d79c113a3b13354f2f82
 SHA512:
-  metadata.gz: fc1c721b351c094243953896088405b4f3800662ac9539bc599cf7d989a48623243d8e443cba789df43fa88d857cd1bacee8ae1fc520a1e5a8a4846bf23c4276
-  data.tar.gz: c6bcb1f77924b2038167ea8c88cfcfcad9cf7cda91677b09ab2f264ff8f61ef7e782ce0a183144180978fa02a2de5d03bfe3f1f424624e1424efc451724384ba
+  metadata.gz: 6bfbfc8977ca31eb293ee61fa43cf042ecf10ee4342c7124880e2bda32b1d966fed74bf0ad02a083d8b3e52a0112482be04da3388e4b9424ec112ef8ddb4bee0
+  data.tar.gz: 204d66b3b7b57d3706248d05551cd29ccc50e824d34a4d0173cc90eb8266133abd5d6398cdc7811afb73d5605ca4b4a0107cbfb24679beff0e285616b9354307

data/lib/protocol/http1/body/chunked.rb

@@ -45,7 +45,7 @@ module Protocol
 					length, _extensions = read_line.split(";", 2)
 					
 					unless length =~ VALID_CHUNK_LENGTH
-						raise BadRequest, "Invalid chunk length: #{length.dump}"
+						raise BadRequest, "Invalid chunk length: #{length.inspect}"
 					end
 					
 					# It is possible this line contains chunk extension, so we use `to_i` to only consider the initial integral part:
@@ -93,7 +93,7 @@ module Protocol
 						if match = line.match(HEADER)
 							@headers.add(match[1], match[2])
 						else
-							raise BadHeader, "Could not parse header: #{line.dump}"
+							raise BadHeader, "Could not parse header: #{line.inspect}"
 						end
 					end
 				end

data/lib/protocol/http1/connection.rb

@@ -240,7 +240,7 @@ module Protocol
 					if match = line.match(HEADER)
 						fields << [match[1], match[2]]
 					else
-						raise BadHeader, "Could not parse header: #{line.dump}"
+						raise BadHeader, "Could not parse header: #{line.inspect}"
 					end
 				end
 				
@@ -423,6 +423,7 @@ module Protocol
 			end
 			
 			def read_remainder_body
+				@persistent = false
 				Body::Remainder.new(@stream)
 			end
 			
@@ -434,6 +435,12 @@ module Protocol
 				read_remainder_body
 			end
 			
+			def read_upgrade_body
+				# When you have an incoming upgrade request body, we must be extremely careful not to start reading it until the upgrade has been confirmed, otherwise if the upgrade was rejected and we started forwarding the incoming request body, it would desynchronize the connection (potential security issue).
+				# We mitigate this issue by setting @persistent to false, which will prevent the connection from being reused, even if the upgrade fails (potential performance issue).
+				read_remainder_body
+			end
+			
 			HEAD = "HEAD"
 			CONNECT = "CONNECT"
 			
@@ -444,7 +451,7 @@ module Protocol
 					if content_length =~ VALID_CONTENT_LENGTH
 						yield Integer(content_length, 10)
 					else
-						raise BadRequest, "Invalid content length: #{content_length.dump}"
+						raise BadRequest, "Invalid content length: #{content_length.inspect}"
 					end
 				end
 			end
@@ -469,6 +476,10 @@ module Protocol
 					return nil
 				end
 				
+				if status == 101
+					return read_upgrade_body
+				end
+				
 				if (status >= 100 and status < 200) or status == 204 or status == 304
 					return nil
 				end
@@ -495,6 +506,11 @@ module Protocol
 					return read_tunnel_body
 				end
 				
+				# A successful upgrade response implies that the connection will become a tunnel immediately after the empty line that concludes the header fields.
+				if headers[UPGRADE]
+					return read_upgrade_body
+				end
+				
 				# 6.  If this is a request message and none of the above are true, then
 				# the message body length is zero (no message body is present).
 				return read_body(headers)

data/lib/protocol/http1/version.rb

@@ -5,6 +5,6 @@
 
 module Protocol
 	module HTTP1
-		VERSION = "0.20.0"
+		VERSION = "0.21.0"
 	end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: protocol-http1
 version: !ruby/object:Gem::Version
-  version: 0.20.0
+  version: 0.21.0
 platform: ruby
 authors:
 - Samuel Williams
@@ -42,7 +42,7 @@ cert_chain:
   Q2K9NVun/S785AP05vKkXZEFYxqG6EW012U4oLcFl5MySFajYXRYbuUpH6AY+HP8
   voD0MPg1DssDLKwXyt1eKD/+Fq0bFWhwVM/1XiAXL7lyYUyOq24KHgQ2Csg=
   -----END CERTIFICATE-----
-date: 2024-08-26 00:00:00.000000000 Z
+date: 2024-09-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: protocol-http