websocket-driver 0.8.0-java → 0.8.2-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d80d130ef14404b970ec6a87d025d02b10c7be7caa4359cd6c69cd272835366b
-  data.tar.gz: 2baea5897642cf2fb7849467c3bbfcfc56719e67878c7141b1942a107ebb4389
+  metadata.gz: 7d6d129506c5f64f0e817c657333d7147b67a23b6a8ede8c3937721ea273d075
+  data.tar.gz: 83edb9b00c6e73454395dae194dbc61aa38a56b733047bd73e8583e3f5eb2993
 SHA512:
-  metadata.gz: ae63f5fb7bd77c6cace3e104188cfdecd5c14ee695dfae034e0e9b671de4acde5199112d73ab04e019b9fdf94f322f06f99990a0b25c6c2772b254e93b093bb1
-  data.tar.gz: 6f2223f6719ae08a3672656fe97a2263dfb0bfc8e206c1fe58f59627562fce257b49a51b71ee330effe03b9b627b84157839d47a312c8725a3d5d6ca1a250961
+  metadata.gz: 77feafd684bc01a1ec797ed707878f15410b3f8cc5c824c36563a33f8cc7d2a8f3876a2a7f839ed840e7c024f615e91523f54be872abcfcf6ab591cb5dfb1433
+  data.tar.gz: ee9de4c1c644f4d401782bd32f580c07d17fd8993efba55b3936d00aaa1881c029e1ef469eb935a96dd75a84ccc42180392dae91ea4cd898fc18281dc875009b

data/CHANGELOG.md

@@ -1,3 +1,15 @@
+### 0.8.2 / 2026-06-23
+
+- Gracefully handle malformed `Host` headers in the `Server` driver
+
+### 0.8.1 / 2026-06-04
+
+- Close a draft-75/76 connection if a length header grows to exceed the
+  configured max length
+- Fail the connection if a message is larger than the configured max length
+  after extension processing
+- Limit the total HTTP request line and headers size to 32K
+
 ### 0.8.0 / 2025-05-25
 
 - Emit binary message as a string with `Encoding::BINARY` instead of an array

data/LICENSE.md

@@ -1,4 +1,4 @@
-Copyright 2010-2025 James Coglan
+Copyright 2010-2026 James Coglan
 
 Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 this file except in compliance with the License. You may obtain a copy of the

data/lib/websocket/driver/draft75.rb

@@ -41,6 +41,7 @@ module WebSocket
 
             when 1 then
               @length = (octet & 0x7F) + 128 * @length
+              return close if @length > @max_length
 
               if @closing and @length.zero?
                 return close

data/lib/websocket/driver/hybi.rb

@@ -400,6 +400,10 @@ module WebSocket
 
         payload = message.data
 
+        if payload.bytesize > @max_length
+          return fail(:too_large, 'WebSocket frame length too large')
+        end
+
         case message.opcode
           when OPCODES[:text] then
             payload = Driver.encode(payload, Encoding::UTF_8)

data/lib/websocket/http/headers.rb

@@ -2,7 +2,7 @@ module WebSocket
   module HTTP
 
     module Headers
-      MAX_LINE_LENGTH = 4096
+      MAX_REQUEST_SIZE = 32768
       CR = 0x0D
       LF = 0x0A
 
@@ -38,6 +38,7 @@ module WebSocket
       attr_reader :headers
 
       def initialize
+        @size    = 0
         @buffer  = []
         @env     = {}
         @headers = {}
@@ -54,6 +55,9 @@ module WebSocket
 
       def parse(chunk)
         chunk.each_byte do |octet|
+          @size += 1
+          return error if @size > MAX_REQUEST_SIZE
+
           if octet == LF and @stage < 2
             @buffer.pop if @buffer.last == CR
             if @buffer.empty?
@@ -71,9 +75,8 @@ module WebSocket
               end
             end
             @buffer = []
-          else
-            @buffer << octet if @stage >= 0
-            error if @stage < 2 and @buffer.size > MAX_LINE_LENGTH
+          elsif @stage >= 0
+            @buffer << octet
           end
         end
         @env['rack.input'] = StringIO.new(string_buffer)

data/lib/websocket/http/request.rb

@@ -33,11 +33,18 @@ module WebSocket
           rack_name = "HTTP_#{ rack_name }" unless RESERVED_HEADERS.include?(name)
           @env[rack_name] = value
         end
-        if host = @env['HTTP_HOST']
-          uri = URI.parse("http://#{ host }")
-          @env['SERVER_NAME'] = uri.host
-          @env['SERVER_PORT'] = uri.port.to_s
-        end
+
+        set_server_vars
+      end
+
+      def set_server_vars
+        return unless host = @env['HTTP_HOST']
+
+        uri = URI.parse("http://#{ host }")
+        @env['SERVER_NAME'] = uri.host
+        @env['SERVER_PORT'] = uri.port.to_s
+      rescue URI::InvalidURIError
+        error
       end
     end
 

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: websocket-driver
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.8.2
 platform: java
 authors:
 - James Coglan
 bindir: bin
 cert_chain: []
-date: 2025-05-25 00:00:00.000000000 Z
+date: 2026-06-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64