Buriburizaemon/nezha_domains
1
0
Fork 0
mirror of https://github.com/Buriburizaem0n/nezha_domains.git synced 2026-09-19 09:40:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): correct stream quota advisory reference

Browse Source
This commit is contained in:
naiba
2026-08-01 20:21:56 +08:00
parent ae87e73f98
commit 6c5317ba93
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/dashboard/controller/terminal_fm_quota_test.go
+2 -2
View File
@@ -1,6 +1,6 @@
package controller
// TDD regression tests for GHSA-jx78-55p5-rwv5 (CVE-2026-53522):
// TDD regression tests for GHSA-jg62-j5h6-8mpq (CVE-2026-53522):
// Unbounded WebSocket Streams — Resource Exhaustion DoS.
//
// The vulnerability: POST /api/v1/terminal and POST /api/v1/file insert a new
@@ -51,7 +51,7 @@ func setupQuotaTest(t *testing.T) (cleanup func(), successStream *failingRequest
// TestCreateTerminalEnforcesPerUserStreamQuota verifies that once a user has
// reached the per-user stream cap, subsequent createTerminal calls are rejected
// with ErrTooManyStreamsForUser. This directly tests the GHSA-jx78-55p5-rwv5
// with ErrTooManyStreamsForUser. This directly tests the GHSA-jg62-j5h6-8mpq
// fix at the HTTP handler layer.
func TestCreateTerminalEnforcesPerUserStreamQuota(t *testing.T) {
cleanup, _ := setupQuotaTest(t)