Comparing 8.20.0...8.21.0 · websockets/ws (original) (raw)

Commits on May 22, 2026

  1. [security] Limit retained message parts
    Previously, the receiver could retain one Buffer entry per buffered
    chunk or message fragment until enough data was parsed or the message
    completed. A peer could use many tiny fragments/chunks and make retained
    memory scale with retained part count rather than message payload size.
    Add configurable maxBufferedChunks and maxFragments options to bound
    the number of retained parts. When either limit is exceeded, emit
    a WS_ERR_TOO_MANY_BUFFERED_PARTS error and close the connection with
    close code 1008.
    Signed-off-by: Nadav0077 18245584+Nadav0077@users.noreply.github.com
    @Nadav0077 @lpinca
    Configuration menu
    Browse the repository at this point in the history
  2. Configuration menu
    Browse the repository at this point in the history