1
0
mirror of https://github.com/square/okhttp.git synced 2026-01-14 07:22:20 +03:00
Commit Graph

4717 Commits

Author SHA1 Message Date
Jesse Wilson
68a106d326 Prepare for release 4.11.0. parent-4.11.0 2023-04-22 20:43:21 -04:00
Jesse Wilson
19c634f32d Build the 4x branch like it's master (#7780) 2023-04-22 20:38:58 -04:00
Yuri Schimke
40cb04338d [4.x] Public suffix import (#7701) 2023-04-22 10:35:57 -04:00
Yuri Schimke
cbcf4f32ff Add a Kotlin dependency to work around CVE-2022-24329 (#7660)
* Bump okio to 3.3.0

* Avoid bad kotlin stdlib versions

* Update okhttp/build.gradle

Co-authored-by: Jesse Wilson <jwilson@squareup.com>
2023-01-22 17:29:13 +00:00
Yuri Schimke
8eddd1d6b8 [4.x] Cherry pick: fix DoH error when using ip address as hostname (#7648)
* Cherrypick: fix DoH error when using ip address as hostname (#7073)

(cherry picked from commit 631a29eb7a)

Co-authored-by: Tao.Zang <zangtao.i@gmail.com>
2023-01-18 18:59:42 +00:00
Yuri Schimke
949262e9fb [4.x] Backport 1XX handling from master (#7634)
* Ignore early hints for 4.9.x (#7444)

(cherry picked from commit b565eecf16)

* Expand 103 handling to other non-specific 1XX messages. (#7629)

(cherry picked from commit 7e4576ccc2)

* Cleanup

* Add a test of 103 handling

* Add copyright

* Add copyright

* Fix cache test for 102/103 (#7633)

(cherry picked from commit 930f138125)

* Disable test
2023-01-12 07:10:39 -05:00
Yuri Schimke
81d34114e2 [4.x] Update Okio to 3.2.0 (#7591)
* Update Okio to 3.2.0

This version does the right thing for Kotlin Multiplatform
and Maven.

* Filtering okio-jvm to okio.

Co-authored-by: Jesse Wilson <jwilson@squareup.com>
2022-12-30 09:38:41 -05:00
Yuri Schimke
e46a200fce Read the response even if writing the request fails (#6295) (#7453)
Closes: 1001
(cherry picked from commit 9533117948)

Co-authored-by: Jesse Wilson <jesse@swank.ca>
2022-10-16 17:14:22 -04:00
Yuri Schimke
cf088f852e Extend Proguard Rules (#6792) (#7471)
(cherry picked from commit 9da841c24c)
2022-10-10 06:16:12 +01:00
Yuri Schimke
d2d251ccaa Reinstane builds on 4.10.x (#7454) 2022-09-18 19:22:26 +01:00
Jesse Wilson
4a6d6b7c5c Prepare next development version. 2022-06-12 10:06:56 -04:00
Jesse Wilson
6b07f62274 Prepare for release 4.10.0. parent-4.10.0 2022-06-12 10:06:21 -04:00
Yuri Schimke
c657392a6e Fix Conscrypt NPE workaround (#7219) (#7230)
(cherry picked from commit 6ba23dcd71)

Co-authored-by: Phil Glass <phil@phil.glass>
2022-04-09 19:52:31 +01:00
Yuri Schimke
5aa716af8e 4.10: Version bump of kotlin, okio. (#7225) 2022-04-09 19:20:30 +01:00
Yuri Schimke
acf873543f Backport of https://github.com/square/okhttp/pull/6495 (#6940) 2021-11-29 09:46:26 -05:00
Jesse Wilson
86acfbd65a Prepare next development version. 2021-11-21 20:20:16 -05:00
Jesse Wilson
0a27e9ff30 Prepare for release 4.9.3. parent-4.9.3 2021-11-21 20:20:05 -05:00
Benoît Quenaudon
97a8f6cac2 Confirm we can read a response that completed before RST_STREAM (#6293) (#6914)
The server can reject the request without breaking the response.

(cherry picked from commit 480c20e46b)

Co-authored-by: Jesse Wilson <jesse@swank.ca>
2021-11-18 10:10:55 -05:00
Jesse Wilson
b1a39f48e5 Prepare next development version. 2021-09-30 20:51:58 -04:00
Jesse Wilson
3edf17ca8a Prepare for release 4.9.2. parent-4.9.2 2021-09-30 20:51:53 -04:00
Yuri Schimke
262b3cde9f Handle strict module handling on JDK17 (#6707) (#6742) 2021-07-17 14:38:35 +01:00
Yuri Schimke
f574ea2f52 Cherry pick fix for CVE-2021-0341 onto 4.9.x (#6741)
* Use generated certificates in unit tests (#6346)

* Use generated certificates in unit tests
* Strict to ascii lowercase implementation

Co-authored-by: Jesse Wilson <jwilson@squareup.com>

* More restrictive behaviour of OkHostnameVerifier (#6353)

* Test quirks of HostnameVerifier.
* Restrict successful results to ascii input.

Co-authored-by: Jesse Wilson <jwilson@squareup.com>
2021-07-04 18:46:56 +01:00
Yuri Schimke
1fd7c0afdc Make it more difficult to accidentally log sensitive headers (#6551) (#6740)
Co-authored-by: Jesse Wilson <jesse@swank.ca>
2021-07-04 11:44:04 -04:00
Yuri Schimke
b0397cc7a9 4.9.x GitHub builds update (#6732)
Copy recipe from master.
2021-07-04 15:16:47 +01:00
Jesse Wilson
eb5a8343ea Prepare next development version. 2021-01-30 13:10:04 -05:00
Jesse Wilson
63dcd95bfa Prepare for release 4.9.1. parent-4.9.1 2021-01-30 13:09:57 -05:00
Jesse Wilson
d2e28ab672 Silently ignore 'bio == null' NullPointerExceptions (#6534)
Closes: https://github.com/square/okhttp/issues/6509
2021-01-30 12:56:45 -05:00
Jesse Wilson
cbeaf8f955 Prepare for release 4.9.0. parent-4.9.0 2020-09-11 17:08:20 -04:00
Yuri Schimke
8fd74a7482 Conscrypt 2.5.1 Upgrade (#6263) 2020-09-11 16:40:20 -04:00
Yuri Schimke
2bd749dd9d Kotlin 1.4.10 Upgrade (#6264) 2020-09-11 11:23:09 -04:00
Yuri Schimke
0164696a8a Fix build on windows (#6257)
Issue relates to default encoding picked up for daemons affecting compile, previous approach was launch property which doesn't affect Gradle daemons.
2020-09-10 06:45:43 +01:00
Yuri Schimke
e4c3b28c39 Fix HttpUrl documentation (#6259) 2020-09-09 21:48:40 -04:00
Jesse Wilson
8c2f383f14 Document interceptor throwing modes (#6235) 2020-09-09 21:48:06 -04:00
Yuri Schimke
a76c40a935 Kotlin 1.4 dependency upgrade and language features (#5947) 2020-09-06 16:36:12 +01:00
Thomas Wirth
1589741a90 Fix Caching documentation. (#6247) 2020-09-04 07:27:54 -04:00
Russell
45010c58a0 Add "MockWebServer" as a known logger (#6229) 2020-08-26 17:35:44 +03:00
Lavong Soysavanh
dbb2c346e7 Update https.md (#6234)
fix link
2020-08-23 16:24:04 -04:00
Yuri Schimke
504faef750 Conscrypt 2.5.0 upgrade (#6228)
Conscrypt 2.5.0 upgrade with a workaround for changed Conscrypt API
2020-08-20 21:27:00 +01:00
Jesse Wilson
96a2118dd4 Release OkHttp 4.8.1. 2020-08-06 10:07:13 -04:00
Jesse Wilson
b1963bf8d8 Implement DER constraints on date formats (#6213)
The time zone must be 'Z', and cannot be an offset like '+0000'. That
is allowed by ASN.1 but not by DER.

Closes: https://github.com/square/okhttp/issues/6210
2020-08-05 19:50:44 -04:00
Yuri Schimke
9724946320 Avoid DefaultImpls bug (#6198)
* Avoid DefaultImpls bug

* private classes
2020-07-25 09:43:50 -04:00
Yuri Schimke
d2c5a74def Allow missing SAN in certificates (#6186) 2020-07-16 06:34:27 -04:00
Jesse Wilson
6aae409a3e Don't install the Bouncy Castle provider in HeldCertificate (#6183)
This potentially changes behavior for applications requiring security
features that are available in Bouncy Castle but not the platform. To
mitigate this, execute this before such operations:

    Security.addProvider(BouncyCastleProvider())

You will also need to configure this dependency:

    implementation "org.bouncycastle:bcprov-jdk15on:1.65"
2020-07-12 11:59:51 -04:00
Jesse Wilson
548f601f69 Fix some issues discovered by simple fuzzing (#6181)
We were throwing IllegalArgumentException or ParseException but
want to throw only ProtocolException or EOFException.
2020-07-11 20:03:35 -04:00
Jesse Wilson
828587ae43 Fix a broken link in the changelog 2020-07-11 15:06:11 -04:00
Jesse Wilson
d479b0e41c Prepare next development version. 2020-07-11 14:01:11 -04:00
Jesse Wilson
a70e992c3f Prepare for release 4.8.0. parent-4.8.0 2020-07-11 14:01:06 -04:00
Jesse Wilson
cf367d9339 Add defensive checks for malformed ASN.1 DER (#6180)
If the date is before 1950-01-01, use a four-digit year

If the self-delimiting object identifer exceeds the enclosing object's
size, fail.

If a nested object exceeds its enclosing object's size, fail.
2020-07-11 10:38:11 -04:00
Jesse Wilson
0e0f3a2d8d Push OkHttp 3.14.x into the sea. It is no longer supported. (#6179)
OkHttp 4.x is our only branch receiving security fixes, bug fixes, and
new features.

OkHttp 3.12.x gets security fixes only.
2020-07-11 11:04:10 +01:00
Maciej Górski
7c9cfd6b28 Fix typo (#6178) 2020-07-10 08:48:21 -04:00