fix(api): reject ambiguous HTTP request framing - #254

Merged

seonghobae merged 29 commits into

mainfrom

fix/session-http-framing-20260818

Aug 25, 2026

Commits on Aug 18, 2026

test(api): reject ambiguous HTTP message framing
seonghobae
committed
f65e58d
fix(api): harden session HTTP framing boundary
seonghobae
committed
cf1380f
fix(api): route public session HTTP through framing guard
seonghobae
committed
9a715a3
merge main into session HTTP framing fix
seonghobae
committed
c76d7ff
fix(ci): format framing boundary and scope legacy dead-code expectation
seonghobae
committed
f73db14
Merge branch 'main' into fix/session-http-framing-20260818
opencode-agent[bot]
authored
2ba6556

Commits on Aug 19, 2026

test(api): reject malformed HTTP header field lines
seonghobae
committed
587f819
fix(api): reject malformed HTTP header field lines
seonghobae
committed
9bd9f3d
test(api): exercise malformed framing guard in library coverage
seonghobae
committed
4e6b863

Commits on Aug 20, 2026

test(api): reject malformed framing header aliases
seonghobae
committed
344fcce
fix(api): reject malformed HTTP field-name aliases
seonghobae
committed
82121a8
test(api): reject non-CRLF HTTP header lines
seonghobae
committed
6bbf4bb
fix(api): enforce CRLF request framing
seonghobae
committed
b542f20
test(api): reject unbounded and trailing HTTP framing
seonghobae
committed
da2f17b
fix(api): bound and seal single-request HTTP framing
seonghobae
committed
80754d8
test(api): frame loopback create explicitly
seonghobae
committed
94ed19d
style(api): apply pinned request-boundary rustfmt
seonghobae
committed
096038c
fix(http): remove uncovered legacy session framing path
seonghobae
committed
8ab49c7
Merge branch 'main' into fix/session-http-framing-20260818
github-actions[bot]
authored
cfc6f46
test(api): tolerate expected peer-close race
seonghobae
committed
4fa541d
test(http): cover invalid content length parsing
seonghobae
committed
c72cbb7
test(api): reject truncated declared session bodies
seonghobae
committed
74974ce
fix(api): reject EOF before a complete session frame
seonghobae
committed
2f41f2a
fix(api): keep EOF error coverage report stable
seonghobae
committed
d0b3e81
merge(main): reconcile HTTP framing hardening after #258
seonghobae
committed
a8f756a
docs(session): clarify HTTP framing boundary
seonghobae
committed
d2aa585

Commits on Aug 21, 2026

Commits on Aug 22, 2026

Merge branch 'main' into fix/session-http-framing-20260818
opencode-agent[bot]
authored
f74c478