websocket/go.mod

module github.com/gorilla/websocket

go 1.20

retract (
    v1.5.2 // tag accidentally overwritten
)

require golang.org/x/net v0.26.0
Add support for go-module 2018-12-18 10:24:45 +03:00			`module github.com/gorilla/websocket`
Read Limit Fix (#537) This fix addresses a potential denial-of-service (DoS) vector that can cause an integer overflow in the presence of malicious WebSocket frames. The fix adds additional checks against the remaining bytes on a connection, as well as a test to prevent regression. Credit to Max Justicz (https://justi.cz/) for discovering and reporting this, as well as providing a robust PoC and review. * build: go.mod to go1.12 * bugfix: fix DoS vector caused by readLimit bypass * test: update TestReadLimit sub-test * bugfix: payload length 127 should read bytes as uint64 * bugfix: defend against readLength overflows 2019-08-25 04:17:28 +03:00
Set min Go version to 1.20 (#930) Update go.mod and CI to Go version 1.20. 2024-06-19 07:40:57 +03:00			`go 1.20`
chore: Retract v1.5.2 from go.mod Maintainers accidentally changed the reference commit for v1.5.2. This change retracts v1.5.2 which also includes a number of avoidable issues. Fixes #927 2024-06-19 07:30:39 +03:00
			`retract (`
			`v1.5.2 // tag accidentally overwritten`
Set min Go version to 1.20 (#930) Update go.mod and CI to Go version 1.20. 2024-06-19 07:40:57 +03:00			`)`
Unbundle x/net/proxy and update to recent version Import golang.org/x/net/proxy instead of using the bundle in x_net_proxy.go. There's no need to avoid the dependency on golang.org/x/net/proxy now that Go's module system is in widespread use. Change Dialer.DialContext to pass contexts as an argument to the dial function instead of tunneling the context through closures. Tunneling is no longer needed because the proxy package supports contexts. The version of the proxy package in the bundle predates contexts! Simplify the code for calculating the base dial function. Prevent the HTTP proxy dialer from leaking out of the websocket package by selecting the HTTP proxy dialer directly in the websocket package. Previously, the HTTP dialer was registered with the proxy package. 2024-06-14 05:34:08 +03:00
			`require golang.org/x/net v0.26.0`