tangled-fork/knotmirror/xrpc/ at master · willdot.net/tangled-fork · Tangled

willdot.net / tangled-fork

forked from tangled.org/core

0

Monorepo for Tangled

0

tangled-fork / knotmirror / xrpc /

at master 15 files

Seongmin Lee knotmirror: apply ssrf protection on knotproxy 6w ago

git_get_archive.go

knotmirror: apply ssrf protection on knotproxy Vulnerability reported by @tolik518.tngl.sh Co-authored-by: tolik518 <function@returnnull.de> Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

git_get_blob.go

knotmirror: set max size on getBlob Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

git_get_branch.go

knotmirror/proxy: proxy in case of knotmirror err We ought to harden the knotmirror in case we get errors from tap or anywhere else, in situations such that the appview knows about a git repo somewhere but the knot- mirror doesn't. I would call this good practice in general so that we have robust infrastructure and other possible future appviews would also be able to trust that the knotmirror will serve them repos that in fact exist. Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

knotmirror/proxy: proxy in case of knotmirror err We ought to harden the knotmirror in case we get errors from tap or anywhere else, in situations such that the appview knows about a git repo somewhere but the knot- mirror doesn't. I would call this good practice in general so that we have robust infrastructure and other possible future appviews would also be able to trust that the knotmirror will serve them repos that in fact exist. Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

git_get_tree.go

knotmirror/xrpc: pprof labeling Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

git_list_branches.go

knotmirror: key repos by repo_did + disk migration Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

git_list_commits.go

knotmirror/proxy: proxy in case of knotmirror err We ought to harden the knotmirror in case we get errors from tap or anywhere else, in situations such that the appview knows about a git repo somewhere but the knot- mirror doesn't. I would call this good practice in general so that we have robust infrastructure and other possible future appviews would also be able to trust that the knotmirror will serve them repos that in fact exist. Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

git_list_languages.go

knotmirror/xrpc: pprof labeling Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

git_list_tags.go

knotmirror/proxy: proxy in case of knotmirror err We ought to harden the knotmirror in case we get errors from tap or anywhere else, in situations such that the appview knows about a git repo somewhere but the knot- mirror doesn't. I would call this good practice in general so that we have robust infrastructure and other possible future appviews would also be able to trust that the knotmirror will serve them repos that in fact exist. Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

knotmirror: add inflight api Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

knotmirror/xrpc: add more prometheus metrics Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.org>

1 month ago

knotmirror: apply ssrf protection on knotproxy Vulnerability reported by @tolik518.tngl.sh Co-authored-by: tolik518 <function@returnnull.de> Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

appview,knotmirror: prefer knotmirror to load blobs also use octet-stream for blobs larger than 1MB to avoid OOM Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago

sync_request_crawl.go

knotmirror: key repos by repo_did + disk migration Lewis: May this revision serve well! <lewis@tangled.org>

2 months ago

knotmirror: apply ssrf protection on knotproxy Vulnerability reported by @tolik518.tngl.sh Co-authored-by: tolik518 <function@returnnull.de> Signed-off-by: Seongmin Lee <git@boltless.me>

1 month ago