thingsboard

Commit Graph

Author	SHA1	Message	Date
Volodymyr Babak	497895b091	Revent toInt	4 months ago
Viacheslav Klimov	628fe04032	Make SsrfProtectionValidator-dependent tests more stable	6 months ago
Viacheslav Klimov	3747553527	Improve SSRF validator test coverage Add tests for: isHostnameAllowed API, one-arg validateUri overload, allow-list case-insensitivity, allow-list overriding cloud metadata and loopback ranges, CIDR boundary conditions, IPv6 unique local (fc00::/7), whitespace/blank entry parsing, allow-list replacement, and allow-listing blocked hostnames like localhost.	6 months ago
Viacheslav Klimov	ae8246fc60	Fix SSRF DNS rebinding bypass, add allow-list, protect additional HTTP vectors Add SsrfSafeAddressResolverGroup that validates resolved IPs at Netty connection time, eliminating the TOCTOU gap where DNS rebinding domains resolve to safe IPs during validation but to private/metadata IPs at connection time. Disable HTTP redirects in TbHttpClient to prevent redirect-based SSRF bypass. Add allow-list support (SSRF_ALLOWED_HOSTS) to SsrfProtectionValidator so customers with IoT devices on private networks can whitelist specific addresses or CIDR ranges while keeping SSRF protection enabled. Add SSRF validation to MS Teams webhook, custom OAuth2 mapper, and GitHub OAuth2 mapper endpoints. Log a warning when SSRF protection is disabled.	6 months ago
Viacheslav Klimov	0d23685b62	Fix flaky SsrfProtectionValidatorTest by moving @ResourceLock to class level Tests that read shared static state (e.g. testAllowedUrls with 8.8.8.8) could run concurrently with tests that mutate it (e.g. testAdditionalBlockedSingleIp), causing intermittent failures. Class-level @ResourceLock serializes all tests. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	6 months ago
Viacheslav Klimov	45c0691b47	Add SSRF protection	6 months ago
dshvaika	e7ca66848c	Improved errors handling for Geofencing CF	8 months ago
IrynaMatveieva	0e9756f8ce	moved number utility method to a new utility class	8 months ago
Viacheslav Klimov	295e7d68c9	Update license headers	8 months ago
Viacheslav Klimov	5b5b4dff6b	Update license header	8 months ago
dshvaika	29934d08bd	Added custom serializer/deserializer logic for perimeter definitions	1 year ago
Igor Kulikov	5cf26d4851	Update license header	2 years ago
Oleksandra Matviienko	1b0b10a15a	Usage of long refactored to int in LinkedHashMapRemoveEldest class Signed-off-by: Oleksandra Matviienko <al.zzzeebra@gmail.com>	2 years ago
Dmytro Skarzhynets	bbe328d158	Implemented safe scheduled thread pool	2 years ago
Oleksandra Matviienko	63df92e995	JUnit5 migration in common. Junit-platform.properties and logback-test.xml where added to java resource directories if needed. Signed-off-by: Oleksandra Matviienko <al.zzzeebra@gmail.com>	2 years ago
Sergey Matvienko	16490e1e2f	optionalMappingJDK8ModuleTest added	2 years ago
IrynaMatveieva	837933a2e0	moved the static toPlainText() method to the JacksonUtil class	3 years ago
Ivan Raznatovskyi	09fc025e12	Initial commit from another fork	3 years ago
Igor Kulikov	c5a72ed8df	Update license header to 2024 year.	3 years ago
Andrii Landiak	4430322b29	Refactor Jackson: fromStringIgnoreUnknownProperties to fromString(String string, Class<T> clazz, boolean ignoreUnknownFields)	3 years ago
Andrii Landiak	6fa3a125c2	Mino refactoring: add json support for resources, fix test and edgeVersion for test	3 years ago
Andrii Landiak	ec4200d735	Refactoring after final review	3 years ago
Andrii Landiak	b14a304473	Refactoring for edge proto to send entity serialized in order not to update everytime entity changes its structure	3 years ago
Sergey Matvienko	e75307c2be	ExceptionUtil.lookupExceptionInCause refactored from recursion to a loop. Tests added	3 years ago
Seraphym-Tuhai	29c3eddc8a	Merge with branch 'develop/3.5' of github.com:thingsboard/thingsboard	3 years ago
Igor Kulikov	cbdc4517e4	Update license header year to 2023	4 years ago
ShvaykaD	e94d305f61	added JacksonUtilTest for ALLOW_UNQUOTED_FIELD_NAMES_MAPPER and updated getAttributes tests	4 years ago
Igor Kulikov	da4c742872	Update license year to 2022	5 years ago
Sergey Matvienko	66f5e17bab	fixed licence header (CE) for LinkedHashMapRemoveEldest (removed <p>)	5 years ago
Sergey Matvienko	4eb6a94ff5	fixed licence header (CE) for LinkedHashMapRemoveEldest	5 years ago
Sergey Matvienko	57b0e19ec8	util: LinkedHashMapRemoveEldest refactored	5 years ago
Sergey Matvienko	3d3aae60d8	util: LinkedHashMapRemoveEldest refactored with BiConsumer	5 years ago
Sergey Matvienko	d7f797a065	util: LinkedHashMapRemoveEldest implemented with test	5 years ago

39 Commits (0a30dc00d5bab6423fa55499cdd7b44b53b3d978)