mirror of
https://github.com/actions/setup-java.git
synced 2026-06-17 08:54:24 +00:00
- Make getNextPageUrlFromLinkHeader RFC 8288 compliant by splitting link-values and checking for rel=next anywhere in the parameters, not just as the first parameter after the semicolon. - Add validatePaginationUrl utility to reject pagination URLs that point to unexpected origins (SSRF mitigation). - Centralize MAX_PAGINATION_PAGES in util.ts instead of duplicating across Adopt, Semeru, and Temurin installers. - Add tests for rel not being the first parameter, and for URL origin validation. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| cache | ||
| data | ||
| distributors | ||
| auth.test.ts | ||
| cache.test.ts | ||
| cleanup-java.test.ts | ||
| gpg.test.ts | ||
| toolchains.test.ts | ||
| util.test.ts | ||
| verify-java.sh | ||