Yong Tang f67994442a core: Reject oversized GET dns query parameter of DoH (#7926) ...

* core: Reject oversized GET dns query parameter of DoH

The DoH POST path limits request size using http.MaxBytesReader(..., 65536), but the GET path passes the dns query value directly to base64ToMsg() with no equivalent bound.

This PR adds length check.

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Fix

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

---------

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

2026-03-18 09:38:44 +02:00

..

cache

chore: bump minimum Go version to 1.25 (#7788)

2026-02-16 05:28:30 -08:00

cidr

lint: enable intrange linter (#7331)

2025-05-28 17:50:55 -07:00

dnstest

fix: lint issues from plugin/forward and plugin/pkg/dnstest (#7539)

2025-09-13 15:14:10 -07:00

dnsutil

chore: bump Go version to 1.26.0 (#7856)

2026-02-16 04:26:18 -08:00

doh

core: Reject oversized GET dns query parameter of DoH (#7926)

2026-03-18 09:38:44 +02:00

durations

plugin/timeouts - Allow ability to configure listening server timeouts (#5784)

2022-12-28 12:14:16 +01:00

edns

plugin/edns: remove truncating of question section on bad EDNS version (#5787)

2022-12-01 09:07:13 -05:00

expression

chore(lint): modernize Go (#7536)

2025-09-10 13:08:27 -07:00

fall

chore: bump Go version to 1.26.0 (#7856)

2026-02-16 04:26:18 -08:00

fuzz

fuzz: revert setup function (#3189)

2019-08-25 19:01:35 +00:00

log

chore(lint): modernize Go (#7536)

2025-09-10 13:08:27 -07:00

nonwriter

Revert pkg/nonwriter changes (#1829)

2018-05-23 08:50:27 -04:00

parse

plugin/forward: fix parsing error when handling TLS+IPv6 address (#7848)

2026-02-25 02:21:39 -08:00

proxy

plugin/forward: add max_age option to enforce an absolute connection lifetime (#7903)

2026-03-09 11:50:03 -07:00

proxyproto

feat(proxyproto): add proxy protocol support (#7738)

2026-02-10 17:14:05 -08:00

rand

chore: bump minimum Go version to 1.25 (#7788)

2026-02-16 05:28:30 -08:00

rcode

doc: some function/vars/const/package level updates (#1558)

2018-02-23 15:02:05 +00:00

replacer

plugin/pkg/replacer: fix usage of sync.Pool to save an alloc (#7701)

2025-11-21 13:41:58 -08:00

response

respond with REFUSED when max_concurrent is exceeded to avoid caching it (#4326)

2020-12-15 14:02:15 +01:00

reuseport

chore(lint): bump golangci-lint to v2.11.1 (#7905)

2026-03-06 11:50:24 -08:00

singleflight

chore: bump minimum Go version to 1.25 (#7788)

2026-02-16 05:28:30 -08:00

tls

chore(lint): bump golangci-lint to v2.11.1 (#7905)

2026-03-06 11:50:24 -08:00

trace

Fix import ordering presubmit test (#4422)

2021-01-24 17:28:49 +00:00

transport

Add basic support for DoH3 (#7677)

2025-11-21 06:01:59 +02:00

uniq

plugin/pkg/uniq: fix data race with sync.RWMutex (#7707)

2025-11-24 22:14:21 +02:00

up

Fix typos (#6235)

2023-08-10 11:06:48 -04:00

upstream

Update upstream.Lookup method comment to reflect current state (#4832)

2021-08-27 14:23:05 +02:00