You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

George Joseph 87641e9b2c res_ari: Ensure read-only users are properly authorized via REST Over WebSocket. ... The REST over WebSocket path now properly prevents non-GET methods from being executed on inbound WebSockets. * The query parameters from the original incoming GET request that caused the upgrade to WebSocket are now passed to all REST requests that come from the client. This ensures that if the client authenticated with a read-only userid using the "api_key" query_string parameter, REST requests coming in over the WebSocket will only be able to execute GETs on resources. The HTTP headers were already passed to the REST requests so if the client had authenticated via an "Authorization" it was properly handled. * New tests have been added to test_ari.c to check that read-only users are properly denied access to resources using non-GET methods. Several memory leaks were also squashed. Resolves: #GHSA-wcvv-g26m-wx5c		4 months ago
..
CI	…
keys	…
Makefile	…
test_abstract_jb.c	…
test_acl.c	…
test_aeap.c	…
test_aeap_speech.c	…
test_aeap_transaction.c	…
test_aeap_transport.c	…
test_ami_security_events.sh	…
test_amihooks.c	…
test_aoc.c	…
test_app.c	…
test_ari.c	res_ari: Ensure read-only users are properly authorized via REST Over WebSocket.	4 months ago
test_ari_model.c	…
test_ast_format_str_reduce.c	…
test_astobj2.c	…
test_astobj2_thrash.c	…
test_astobj2_weaken.c	…
test_bridging.c	…
test_bucket.c	…
test_callerid.c	…
test_capture.c	…
test_cdr.c	…
test_cel.c	…
test_channel.c	…
test_channel_feature_hooks.c	…
test_codec_translations.c	tests: add tests/test_codec_translations.c	5 months ago
test_config.c	…
test_conversions.c	…
test_core_codec.c	…
test_core_format.c	…
test_crypto.c	…
test_data_buffer.c	…
test_db.c	…
test_devicestate.c	…
test_dlinklists.c	…
test_dns.c	…
test_dns_naptr.c	…
test_dns_query_set.c	…
test_dns_recurring.c	…
test_dns_srv.c	…
test_endpoints.c	…
test_event.c	…
test_expr.c	…
test_file.c	…
test_format_cache.c	…
test_format_cap.c	…
test_func_file.c	…
test_gosub.c	…
test_hashtab_thrash.c	…
test_heap.c	…
test_http_media_cache.c	…
test_jitterbuf.c	…
test_json.c	…
test_linkedlists.c	…
test_locale.c	…
test_logger.c	…
test_media_cache.c	…
test_message.c	…
test_mwi.c	…
test_named_lock.c	…
test_netsock2.c	…
test_optional_api.c	…
test_pbx.c	…
test_poll.c	…
test_res_pjsip_scheduler.c	…
test_res_pjsip_session_caps.c	…
test_res_prometheus.c	test_res_prometheus: Fix compilation failure on Debian 13.	1 year ago
test_res_rtp.c	…
test_res_stasis.c	…
test_sched.c	…
test_scope_trace.c	…
test_scoped_lock.c	…
test_security_events.c	…
test_skel.c	…
test_sorcery.c	sorcery: Prevent duplicate objects and ensure missing objects are created on update	1 year ago
test_sorcery_astdb.c	sorcery: Prevent duplicate objects and ensure missing objects are created on update	1 year ago
test_sorcery_memory_cache_thrash.c	…
test_sorcery_realtime.c	…
test_stasis.c	taskpool: Fix some references to threadpool that should be taskpool.	12 months ago
test_stasis_channels.c	…
test_stasis_endpoints.c	endpoints: Remove need for stasis subscription.	12 months ago
test_stasis_state.c	…
test_stream.c	…
test_stringfields.c	…
test_strings.c	…
test_substitution.c	…
test_taskpool.c	pjsip: Move from threadpool to taskpool	9 months ago
test_taskprocessor.c	taskprocessors: Improve logging and add new cli options	9 months ago
test_threadpool.c	pjsip: Move from threadpool to taskpool	9 months ago
test_time.c	…
test_uri.c	…
test_utils.c	…
test_uuid.c	…
test_vector.c	…
test_voicemail_api.c	…
test_websocket_client.c	…
test_xml_escape.c	…