Skip to content

GitLab

Switch branch/tag
  1. 23 Apr, 2020 2 commits
    • Steven Allen's avatar
      chore: update dht · c3b34e54
      Steven Allen authored 
      fixes a small bug in query notifications that was causing a test to fail
      c3b34e54
    • Steven Allen's avatar
      fix: fix duplicate block issue in bitswap · 5d13ac37
      Steven Allen authored 
      1. Increase broadcast timeout.
2. Fix use of sessions when pinning.

This also includes some bitswap changes to reduce some memory allocations and
optimize some hot spots.
      5d13ac37
  3. 22 Apr, 2020 1 commit
  5. 21 Apr, 2020 2 commits
  7. 17 Apr, 2020 3 commits
  9. 15 Apr, 2020 2 commits
    • Steven Allen's avatar
      chore: update the DHT · 66643e0c
      Steven Allen authored 
      Reduces allocations
      66643e0c
    • Steven Allen's avatar
      feat: add autonat config options · 1f23fc00
      Steven Allen authored 
      1. Enable AutoNATService on _all_ nodes by default. If it's an issue, we can
disable it in RC3 but this will give us the best testing results.
2. Expose options to configure AutoNAT rate limiting.
      1f23fc00
  11. 14 Apr, 2020 2 commits
  13. 11 Apr, 2020 1 commit
  15. 10 Apr, 2020 3 commits
  17. 09 Apr, 2020 1 commit
  19. 08 Apr, 2020 6 commits
  21. 07 Apr, 2020 1 commit
  23. 06 Apr, 2020 1 commit
  25. 05 Apr, 2020 1 commit
    • Hector Sanjuan's avatar
      HTTP API: Disallow GET requests on API · 1b490476
      Hector Sanjuan authored 
      This commit upgrades go-ipfs-cmds and configures the commands HTTP API Handler
to only allow POST/OPTIONS, disallowing GET and others in the handling of
command requests in the IPFS HTTP API (where before every type of request
method was handled, with GET/POST/PUT/PATCH being equivalent).

The Read-Only commands that the HTTP API attaches to the gateway endpoint will
additional handled GET as they did before (but stop handling PUT,DELETEs).

By limiting the request types we address the possibility that a website
accessed by a browser abuses the IPFS API by issuing GET requests to it which
have no Origin or Referrer set, and are thus bypass CORS and CSRF protections.

This is a breaking change for clients that relay on GET requests against the
HTTP endpoint (usually :5001). Applications integrating on top of the
gateway-read-only API should still work (including cross-domain access).
Co-Authored-By: default avatarSteven Allen <steven@stebalien.com>
Co-Authored-By: default avatarMarcin Rataj <lidel@lidel.org>
      1b490476
  27. 03 Apr, 2020 1 commit
    • Steven Allen's avatar
      chore: update libp2p deps · 8fc9ddfe
      Steven Allen authored 
      Prepare for an RC. This also re-re-disables stream write coalescing till we get
a chance to thoroughly profile it.
      8fc9ddfe
  29. 02 Apr, 2020 3 commits
  31. 01 Apr, 2020 1 commit
  33. 30 Mar, 2020 4 commits
  35. 28 Mar, 2020 2 commits
  37. 27 Mar, 2020 1 commit
  39. 26 Mar, 2020 2 commits