websocket-driver 0.8.0-java → 0.8.1-java

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d80d130ef14404b970ec6a87d025d02b10c7be7caa4359cd6c69cd272835366b
-  data.tar.gz: 2baea5897642cf2fb7849467c3bbfcfc56719e67878c7141b1942a107ebb4389
+  metadata.gz: 51fb8d62186b84c908b815c0ece5099d0d951a3f2a74850f70b58ba2aa5165e5
+  data.tar.gz: 3d899c1487db01b89577d2cd29751bf982056ef95e8ee7b651aedee083a174e4
 SHA512:
-  metadata.gz: ae63f5fb7bd77c6cace3e104188cfdecd5c14ee695dfae034e0e9b671de4acde5199112d73ab04e019b9fdf94f322f06f99990a0b25c6c2772b254e93b093bb1
-  data.tar.gz: 6f2223f6719ae08a3672656fe97a2263dfb0bfc8e206c1fe58f59627562fce257b49a51b71ee330effe03b9b627b84157839d47a312c8725a3d5d6ca1a250961
+  metadata.gz: 2df1d2e57d32a7dbb5d8d49a6ef987a4544a1ae01bcd28cc9ebce8bbd984bcb2a3455117850dc1d681ffeddc31578d9ca86ce4b0a55ae148d27f77234480aa16
+  data.tar.gz: 23a6a91922d289e12ca9333576016ff8194435aef939806ac927f699ead5b639264161809b7a92e9eccbc27b1b79d3ab07729017fe884f2e04345214f131fdb0

data/CHANGELOG.md

@@ -1,3 +1,11 @@
+### 0.8.1 / 2026-06-04
+
+- Close a draft-75/76 connection if a length header grows to exceed the
+  configured max length
+- Fail the connection if a message is larger than the configured max length
+  after extension processing
+- Limit the total HTTP request line and headers size to 32K
+
 ### 0.8.0 / 2025-05-25
 
 - Emit binary message as a string with `Encoding::BINARY` instead of an array

data/LICENSE.md

@@ -1,4 +1,4 @@
-Copyright 2010-2025 James Coglan
+Copyright 2010-2026 James Coglan
 
 Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 this file except in compliance with the License. You may obtain a copy of the

data/lib/websocket/driver/draft75.rb

@@ -41,6 +41,7 @@ module WebSocket
 
             when 1 then
               @length = (octet & 0x7F) + 128 * @length
+              return close if @length > @max_length
 
               if @closing and @length.zero?
                 return close

data/lib/websocket/driver/hybi.rb

@@ -400,6 +400,10 @@ module WebSocket
 
         payload = message.data
 
+        if payload.bytesize > @max_length
+          return fail(:too_large, 'WebSocket frame length too large')
+        end
+
         case message.opcode
           when OPCODES[:text] then
             payload = Driver.encode(payload, Encoding::UTF_8)

data/lib/websocket/http/headers.rb

@@ -2,7 +2,7 @@ module WebSocket
   module HTTP
 
     module Headers
-      MAX_LINE_LENGTH = 4096
+      MAX_REQUEST_SIZE = 32768
       CR = 0x0D
       LF = 0x0A
 
@@ -38,6 +38,7 @@ module WebSocket
       attr_reader :headers
 
       def initialize
+        @size    = 0
         @buffer  = []
         @env     = {}
         @headers = {}
@@ -54,6 +55,9 @@ module WebSocket
 
       def parse(chunk)
         chunk.each_byte do |octet|
+          @size += 1
+          return error if @size > MAX_REQUEST_SIZE
+
           if octet == LF and @stage < 2
             @buffer.pop if @buffer.last == CR
             if @buffer.empty?
@@ -71,9 +75,8 @@ module WebSocket
               end
             end
             @buffer = []
-          else
-            @buffer << octet if @stage >= 0
-            error if @stage < 2 and @buffer.size > MAX_LINE_LENGTH
+          elsif @stage >= 0
+            @buffer << octet
           end
         end
         @env['rack.input'] = StringIO.new(string_buffer)

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: websocket-driver
 version: !ruby/object:Gem::Version
-  version: 0.8.0
+  version: 0.8.1
 platform: java
 authors:
 - James Coglan
 bindir: bin
 cert_chain: []
-date: 2025-05-25 00:00:00.000000000 Z
+date: 2026-06-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: base64