chore(deps): lock file maintenance

Fix unhandled errors (CWE-703)
Fix potential Slowloris Attack because ReadHeaderTimeout was not configured (CWE-400)
2023-11-27 18:15:52 +00:00 · 2023-11-22 10:15:01 +01:00 · 2023-11-22 10:03:43 +01:00
6 changed files with 61 additions and 52 deletions
--- a/go.mod
+++ b/go.mod
@ -17,6 +17,7 @@ require (
 	github.com/swaggo/swag v1.16.2
 	github.com/syndtr/goleveldb v1.0.0
 	github.com/yuin/goldmark v1.6.0
+	go.uber.org/multierr v1.11.0
 	golang.org/x/crypto v0.15.0
 )

--- a/go.sum
+++ b/go.sum
@ -356,6 +356,8 @@ github.com/yuin/goldmark v1.6.0 h1:boZcn2GTjpsynOsC0iJHnBWa4Bi0qzfJjthwauItG68=
 github.com/yuin/goldmark v1.6.0/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY=
 go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
 go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo=
+go.uber.org/multierr v1.11.0 h1:blXXJkSxSSfBVBlC76pxqeO+LN3aDfLQo+309xJstO0=
+go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN80Y=
 golang.org/x/arch v0.0.0-20210923205945-b76863e36670/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
 golang.org/x/arch v0.3.0 h1:02VY4/ZcO/gBOH6PUaoiptASxtXU10jazRCP865E97k=
 golang.org/x/arch v0.3.0/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
--- a/internal/app/admin.go
+++ b/internal/app/admin.go
@ -73,8 +73,9 @@ func NewAdmin(cfg *config.Options) Admin {

 func (app *Admin) Start() {
 	app.srv = &http.Server{
-		Addr:    app.cfg.AdminBind,
-		Handler: app.router,
+		Addr:              app.cfg.AdminBind,
+		Handler:           app.router,
+		ReadHeaderTimeout: 15 * time.Second,
 	}

 	log.Printf("Admin interface listening on %s\n", app.cfg.AdminBind)
--- a/internal/app/app.go
+++ b/internal/app/app.go
@ -72,8 +72,9 @@ func NewApp(cfg *config.Options) App {

 func (app *App) Start() {
 	app.srv = &http.Server{
-		Addr:    app.cfg.Bind,
-		Handler: app.router,
+		Addr:              app.cfg.Bind,
+		Handler:           app.router,
+		ReadHeaderTimeout: 15 * time.Second,
 	}

 	log.Printf("Public interface listening on %s\n", app.cfg.Bind)
--- a/storage/leveldb/updates-from-1.go
+++ b/storage/leveldb/updates-from-1.go
@ -38,6 +38,8 @@ import (
 	"log"
 	"time"

+	"go.uber.org/multierr"
+
 	"git.happydns.org/happyDomain/model"
 )

@ -136,9 +138,11 @@ func migrateFrom1_users_tree(s *LevelDBStorage) (err error) {
 		}

 		// Migrate object of the user
-		migrateFrom1_domains(s, user.Id, newId)
-		migrateFrom1_provider(s, user.Id, newId)
-		migrateFrom1_zone(s, user.Id, newId)
+		err = multierr.Combine(
+			migrateFrom1_domains(s, user.Id, newId),
+			migrateFrom1_provider(s, user.Id, newId),
+			migrateFrom1_zone(s, user.Id, newId),
+		)
 	}

 	return
--- a/ui/package-lock.json
+++ b/ui/package-lock.json
@ -751,16 +751,16 @@
 			"dev": true
 		},
 		"node_modules/@typescript-eslint/eslint-plugin": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-6.12.0.tgz",
-			"integrity": "sha512-XOpZ3IyJUIV1b15M7HVOpgQxPPF7lGXgsfcEIu3yDxFPaf/xZKt7s9QO/pbk7vpWQyVulpJbu4E5LwpZiQo4kA==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/eslint-plugin/-/eslint-plugin-6.13.0.tgz",
+			"integrity": "sha512-HTvbSd0JceI2GW5DHS3R9zbarOqjkM9XDR7zL8eCsBUO/eSiHcoNE7kSL5sjGXmVa9fjH5LCfHDXNnH4QLp7tQ==",
 			"dev": true,
 			"dependencies": {
 				"@eslint-community/regexpp": "^4.5.1",
-				"@typescript-eslint/scope-manager": "6.12.0",
-				"@typescript-eslint/type-utils": "6.12.0",
-				"@typescript-eslint/utils": "6.12.0",
-				"@typescript-eslint/visitor-keys": "6.12.0",
+				"@typescript-eslint/scope-manager": "6.13.0",
+				"@typescript-eslint/type-utils": "6.13.0",
+				"@typescript-eslint/utils": "6.13.0",
+				"@typescript-eslint/visitor-keys": "6.13.0",
 				"debug": "^4.3.4",
 				"graphemer": "^1.4.0",
 				"ignore": "^5.2.4",
@ -786,15 +786,15 @@
 			}
 		},
 		"node_modules/@typescript-eslint/parser": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-6.12.0.tgz",
-			"integrity": "sha512-s8/jNFPKPNRmXEnNXfuo1gemBdVmpQsK1pcu+QIvuNJuhFzGrpD7WjOcvDc/+uEdfzSYpNu7U/+MmbScjoQ6vg==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/parser/-/parser-6.13.0.tgz",
+			"integrity": "sha512-VpG+M7GNhHLI/aTDctqAV0XbzB16vf+qDX9DXuMZSe/0bahzDA9AKZB15NDbd+D9M4cDsJvfkbGOA7qiZ/bWJw==",
 			"dev": true,
 			"dependencies": {
-				"@typescript-eslint/scope-manager": "6.12.0",
-				"@typescript-eslint/types": "6.12.0",
-				"@typescript-eslint/typescript-estree": "6.12.0",
-				"@typescript-eslint/visitor-keys": "6.12.0",
+				"@typescript-eslint/scope-manager": "6.13.0",
+				"@typescript-eslint/types": "6.13.0",
+				"@typescript-eslint/typescript-estree": "6.13.0",
+				"@typescript-eslint/visitor-keys": "6.13.0",
 				"debug": "^4.3.4"
 			},
 			"engines": {
@ -814,13 +814,13 @@
 			}
 		},
 		"node_modules/@typescript-eslint/scope-manager": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-6.12.0.tgz",
-			"integrity": "sha512-5gUvjg+XdSj8pcetdL9eXJzQNTl3RD7LgUiYTl8Aabdi8hFkaGSYnaS6BLc0BGNaDH+tVzVwmKtWvu0jLgWVbw==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/scope-manager/-/scope-manager-6.13.0.tgz",
+			"integrity": "sha512-2x0K2/CujsokIv+LN2T0l5FVDMtsCjkUyYtlcY4xxnxLAW+x41LXr16duoicHpGtLhmtN7kqvuFJ3zbz00Ikhw==",
 			"dev": true,
 			"dependencies": {
-				"@typescript-eslint/types": "6.12.0",
-				"@typescript-eslint/visitor-keys": "6.12.0"
+				"@typescript-eslint/types": "6.13.0",
+				"@typescript-eslint/visitor-keys": "6.13.0"
 			},
 			"engines": {
 				"node": "^16.0.0 || >=18.0.0"
@ -831,13 +831,13 @@
 			}
 		},
 		"node_modules/@typescript-eslint/type-utils": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-6.12.0.tgz",
-			"integrity": "sha512-WWmRXxhm1X8Wlquj+MhsAG4dU/Blvf1xDgGaYCzfvStP2NwPQh6KBvCDbiOEvaE0filhranjIlK/2fSTVwtBng==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/type-utils/-/type-utils-6.13.0.tgz",
+			"integrity": "sha512-YHufAmZd/yP2XdoD3YeFEjq+/Tl+myhzv+GJHSOz+ro/NFGS84mIIuLU3pVwUcauSmwlCrVXbBclkn1HfjY0qQ==",
 			"dev": true,
 			"dependencies": {
-				"@typescript-eslint/typescript-estree": "6.12.0",
-				"@typescript-eslint/utils": "6.12.0",
+				"@typescript-eslint/typescript-estree": "6.13.0",
+				"@typescript-eslint/utils": "6.13.0",
 				"debug": "^4.3.4",
 				"ts-api-utils": "^1.0.1"
 			},
@ -858,9 +858,9 @@
 			}
 		},
 		"node_modules/@typescript-eslint/types": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-6.12.0.tgz",
-			"integrity": "sha512-MA16p/+WxM5JG/F3RTpRIcuOghWO30//VEOvzubM8zuOOBYXsP+IfjoCXXiIfy2Ta8FRh9+IO9QLlaFQUU+10Q==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/types/-/types-6.13.0.tgz",
+			"integrity": "sha512-oXg7DFxx/GmTrKXKKLSoR2rwiutOC7jCQ5nDH5p5VS6cmHE1TcPTaYQ0VPSSUvj7BnNqCgQ/NXcTBxn59pfPTQ==",
 			"dev": true,
 			"engines": {
 				"node": "^16.0.0 || >=18.0.0"
@ -871,13 +871,13 @@
 			}
 		},
 		"node_modules/@typescript-eslint/typescript-estree": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-6.12.0.tgz",
-			"integrity": "sha512-vw9E2P9+3UUWzhgjyyVczLWxZ3GuQNT7QpnIY3o5OMeLO/c8oHljGc8ZpryBMIyympiAAaKgw9e5Hl9dCWFOYw==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/typescript-estree/-/typescript-estree-6.13.0.tgz",
+			"integrity": "sha512-IT4O/YKJDoiy/mPEDsfOfp+473A9GVqXlBKckfrAOuVbTqM8xbc0LuqyFCcgeFWpqu3WjQexolgqN2CuWBYbog==",
 			"dev": true,
 			"dependencies": {
-				"@typescript-eslint/types": "6.12.0",
-				"@typescript-eslint/visitor-keys": "6.12.0",
+				"@typescript-eslint/types": "6.13.0",
+				"@typescript-eslint/visitor-keys": "6.13.0",
 				"debug": "^4.3.4",
 				"globby": "^11.1.0",
 				"is-glob": "^4.0.3",
@ -898,17 +898,17 @@
 			}
 		},
 		"node_modules/@typescript-eslint/utils": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-6.12.0.tgz",
-			"integrity": "sha512-LywPm8h3tGEbgfyjYnu3dauZ0U7R60m+miXgKcZS8c7QALO9uWJdvNoP+duKTk2XMWc7/Q3d/QiCuLN9X6SWyQ==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/utils/-/utils-6.13.0.tgz",
+			"integrity": "sha512-V+txaxARI8yznDkcQ6FNRXxG+T37qT3+2NsDTZ/nKLxv6VfGrRhTnuvxPUxpVuWWr+eVeIxU53PioOXbz8ratQ==",
 			"dev": true,
 			"dependencies": {
 				"@eslint-community/eslint-utils": "^4.4.0",
 				"@types/json-schema": "^7.0.12",
 				"@types/semver": "^7.5.0",
-				"@typescript-eslint/scope-manager": "6.12.0",
-				"@typescript-eslint/types": "6.12.0",
-				"@typescript-eslint/typescript-estree": "6.12.0",
+				"@typescript-eslint/scope-manager": "6.13.0",
+				"@typescript-eslint/types": "6.13.0",
+				"@typescript-eslint/typescript-estree": "6.13.0",
 				"semver": "^7.5.4"
 			},
 			"engines": {
@ -923,12 +923,12 @@
 			}
 		},
 		"node_modules/@typescript-eslint/visitor-keys": {
-			"version": "6.12.0",
-			"resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-6.12.0.tgz",
-			"integrity": "sha512-rg3BizTZHF1k3ipn8gfrzDXXSFKyOEB5zxYXInQ6z0hUvmQlhaZQzK+YmHmNViMA9HzW5Q9+bPPt90bU6GQwyw==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/@typescript-eslint/visitor-keys/-/visitor-keys-6.13.0.tgz",
+			"integrity": "sha512-UQklteCEMCRoq/1UhKFZsHv5E4dN1wQSzJoxTfABasWk1HgJRdg1xNUve/Kv/Sdymt4x+iEzpESOqRFlQr/9Aw==",
 			"dev": true,
 			"dependencies": {
-				"@typescript-eslint/types": "6.12.0",
+				"@typescript-eslint/types": "6.13.0",
 				"eslint-visitor-keys": "^3.4.1"
 			},
 			"engines": {
@ -1332,9 +1332,9 @@
 			}
 		},
 		"node_modules/caniuse-lite": {
-			"version": "1.0.30001564",
-			"resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001564.tgz",
-			"integrity": "sha512-DqAOf+rhof+6GVx1y+xzbFPeOumfQnhYzVnZD6LAXijR77yPtm9mfOcqOnT3mpnJiZVT+kwLAFnRlZcIz+c6bg==",
+			"version": "1.0.30001565",
+			"resolved": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001565.tgz",
+			"integrity": "sha512-xrE//a3O7TP0vaJ8ikzkD2c2NgcVUvsEe2IvFTntV4Yd1Z9FVzh+gW+enX96L0psrbaFMcVcH2l90xNuGDWc8w==",
 			"funding": [
 				{
 					"type": "opencollective",
Author	SHA1	Message	Date
Renovate Bot	a862bc7627	chore(deps): lock file maintenance All checks were successful continuous-integration/drone/push Build is passing Details	2023-11-27 18:15:52 +00:00
Pierre-Olivier Mercier	36071f435b	Fix unhandled errors (CWE-703) All checks were successful continuous-integration/drone/push Build is passing Details	2023-11-22 10:15:01 +01:00
Pierre-Olivier Mercier	a72a889442	Fix potential Slowloris Attack because ReadHeaderTimeout was not configured (CWE-400)	2023-11-22 10:03:43 +01:00