Skip to content

Introduce Canonical Request Model and with shadow canonical decision. #357

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ZhidongPeng merged 16 commits into from
Jun 18, 2026
Merged

Introduce Canonical Request Model and with shadow canonical decision. #357

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
16 commits
Select commit Hold shift + click to select a range
27d3eae
Create the CanonicalRequest model
ZhidongPeng Jun 10, 2026
af70688
Add innovation plan files (#355)
ZhidongPeng Jun 10, 2026
47f1b6e
add property tests
Jun 10, 2026
b8c0192
add proptest-regressions file
ZhidongPeng Jun 10, 2026
3250ebb
add canonical_decision with shadow compare
ZhidongPeng Jun 11, 2026
21704fd
Update check-spelling metadata
Jun 11, 2026
f859b5c
Update the pen tests for linux
ZhidongPeng Jun 16, 2026
13fde99
Merge branch 'can' of https://github.com/ZhidongPeng/GuestProxyAgent …
ZhidongPeng Jun 16, 2026
5d15f88
test with traversal characters must response with Forbidden.
ZhidongPeng Jun 16, 2026
9ed7069
fix linux token_unicode_dotless pen test
ZhidongPeng Jun 16, 2026
22575d5
Merge branch 'dev' of https://github.com/Azure/GuestProxyAgent into can
ZhidongPeng Jun 16, 2026
3f307d8
Merge branch 'dev' of https://github.com/ZhidongPeng/GuestProxyAgent …
ZhidongPeng Jun 16, 2026
dcf4e4c
update with spell
ZhidongPeng Jun 16, 2026
dd744a7
Merge branch 'dev' into can
ZhidongPeng Jun 17, 2026
51b7a43
Merge branch 'dev' of https://github.com/ZhidongPeng/GuestProxyAgent …
ZhidongPeng Jun 18, 2026
fb5f8f0
fix comments
ZhidongPeng Jun 18, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
203 changes: 195 additions & 8 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

6 changes: 6 additions & 0 deletions cspell.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -645,6 +645,12 @@
"Skus",
"VMSS",
"zeroize",
"greppable",
"HGAP",
"hostgaplugin",
"rsid",
"strat",
"uncanonicalizable",
"Аdministrator",
"аzureuser",
"rооt"
Expand Down
1 change: 1 addition & 0 deletions doc/plans/Innovation-2.1-canonical-request.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -284,6 +284,7 @@ hyper::Uri │ ▼ parse_scheme_method (must be http; reject https/ws/...; metho
| `MalformedPercent` | Truncated / non-hex `%XX` | Deny; 400 | `CANON_PCT` |
| `OverlongUtf8` | Classic IDS-bypass payload | Deny; 400 | `CANON_OVERLONG` |
| `InvalidUtf8` | Random bytes or wrong codec | Deny; 400 | `CANON_UTF8` |
| `NonAscii` | Unicode confusable / homoglyph attack in **path** (query allows non-ASCII values) | Deny; 400 | `CANON_NON_ASCII` |
| `ControlChar` | CRLF injection attempt | Deny; 400 | `CANON_CTRL` |
| `PathUnderflow` | Too many `..` | Deny; 400 | `CANON_UNDERFLOW` |
| `EmbeddedQuery` | `%3F` smuggling | Deny; 400 | `CANON_EMBQ` |
Expand Down
Loading
Loading