vee1e/subidx
1
0
Fork 0
mirror of https://github.com/vee1e/subidx.git synced 2026-09-01 17:57:13 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions
subidx/internal
History
lakshit verma f9d1e3585a
rfc6962,apex: reject control and non-printable bytes in hostnames 
Certificate SANs are attacker-controlled and were copied into store
keys unfiltered. Since 0x00 is the apex/sub key separator, a SAN like
'ab\0cd.qqq' corrupted per-apex counts during recount and made scan
bounds ambiguous. Names now must be printable ASCII at ingest, and
Normalize rejects them as defense in depth.
2026-08-21 21:23:22 +05:30
..
apex rfc6962,apex: reject control and non-printable bytes in hostnames 2026-08-21 21:23:22 +05:30
loglist subidx: CT log tailer and crt.name-compatible subdomain search API 2026-08-21 14:26:32 +05:30
rfc6962 rfc6962,apex: reject control and non-printable bytes in hostnames 2026-08-21 21:23:22 +05:30
server subidx: CT log tailer and crt.name-compatible subdomain search API 2026-08-21 14:26:32 +05:30
store store: persist log watermarks atomically with ingested records 2026-08-21 21:22:14 +05:30
tailer store: persist log watermarks atomically with ingested records 2026-08-21 21:22:14 +05:30