Repository navigation
Release 7.0.22-beta - #1091
Merged
Merged
Release 7.0.22-beta#1091
Conversation
…ponses A bare 403 or a Retry-After 429 is an ordinary answer and no longer switches a host to an opaque tunnel. A 403/429 is learned only when it carries a bot-management marker: a vendor header (cf-mitigated, x-datadome*, x-amzn-waf-action, x-kpsdk-*), Server: AkamaiGHost, a bot-management cookie (_abck, bm_sz, datadome, incap_ses_*, _px*), or captcha/challenge in a header name or value (CSP, CORS and auth headers are skipped). Verified against the headers of a real www.expedia.com TLS-fingerprint block.
… encodings Content-Encoding: deflate is zlib-wrapped per RFC 9110, but DeflateStream only reads bare deflate and threw InvalidDataException on zlib bodies. The unhandled exception dropped the whole decrypted HTTP/2 client connection. Add AutoDeflateStream, which sniffs the 2-byte zlib header and reads either form, and keep the wire bytes (with a Debug log naming the URL and encoding) when a buffered HTTP/2 body does not match its Content-Encoding.
The 7.0.21 promote ran the same tree as the published beta and failed Ubuntu ui-portable at +273MB RSS after the in-memory body counter had passed. Linux VmRSS is not returned after GC.
…host Loopback DNS queries and the inspector recovery start were listening on every address, which asks the user to allow testhost.exe.
The search box stays the full query. Chips give one-click undo, and Filters applies a snapshot so several hides fit without crowding the toolbar.
…s the row Automatic follows the OS language and theme on Windows, macOS, and Linux. A filter that removes the selected session no longer leaves an empty Inspect pane, and clearing filters does not reopen a pane the user closed.
Reduce LooksLikeBotChallenge complexity, prefer static chip arrays in tests, and give Expect: 100-continue happy paths a longer read timeout so shared runners stop timing out under load.
…Windows. Use Any() for bot-challenge header scan, and raise the large-body tab budget so loaded Windows runners stop failing around 5 s.
…evelop fix(sonar): clear develop code smells and harden 100-continue CI waits
…lop. Drop unsafe CFString marshaling, call gdbus by absolute path, and tidy static/LINQ/regex findings so the quality gate can go green.
…2 on tip binding. Avoid a Mac-only coverage gap on the PR gate; touch settings so ProxyLocalhostTip stays an instance Avalonia binding.
The instance tip getter is required for Avalonia binding; exercise it so new-code coverage clears 80%.
…te-develop fix(sonar): clear localization-era smells and vulnerabilities on develop
|
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
v7.0.22-betaproduct cut.-hide, HTTP/2 zlib deflate + mismatched encoding survival, bot-challenge-only decrypt bypass learning, and HTTP/3 SVCB DNS bind fix.Test plan
.NET / build,ui-portable×3,cli-e2e×3,RPS saturation / rps×3rps-publish-gate+rps-peer-gatethen NuGet7.0.22-beta, tagv7.0.22-beta, Chocolatey7.0.22-beta, Download Beta