Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

alpaca mitigations #5061

Draft
wants to merge 11 commits into
base: master
Choose a base branch
from
Draft

alpaca mitigations #5061

wants to merge 11 commits into from

Commits on Nov 24, 2024

  1. Alpaca: suite for testing ALPACA countermeasures

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    d235bc6 View commit details
    Browse the repository at this point in the history

  2. imapd: drop connection after excessive syntax errors

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    bc6b255 View commit details
    Browse the repository at this point in the history

  3. imparse: 0x1f is not a valid atom char

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    f055643 View commit details
    Browse the repository at this point in the history

  4. imparse: add imparse_istag

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    3af57f5 View commit details
    Browse the repository at this point in the history

  5. imparse: convert imparse_istag to use lookup table 

    since it's about to get more complicated than just isatom
    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    bda6b78 View commit details
    Browse the repository at this point in the history

  6. imparse: forbid angle brackets in imap tags 

    reduces surface area for cross-protocol reflection attacks against
web browsers
    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    68948ae View commit details
    Browse the repository at this point in the history

  7. imparse: forbid colon in imap tags

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    c5bd967 View commit details
    Browse the repository at this point in the history

  8. imapd: ENABLE requires login 

    It already did, but this early short-circuit was overlooked at the time

(This isn't strictly related to this PR, but while I'm in here anyway...)
    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    06e0f3b View commit details
    Browse the repository at this point in the history

  9. imapd: fix some #endif comments

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    e9ce041 View commit details
    Browse the repository at this point in the history

  10. imparse: reject HTTP methods as initial tag only

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    1075a9d View commit details
    Browse the repository at this point in the history

  11. imapd: drop connection if bad tag on first command

    @elliefm
    elliefm committed Nov 24, 2024
    Configuration menu
    Copy the full SHA
    fd4f32d View commit details
    Browse the repository at this point in the history