2 Commits

Include renames

Author	SHA1	Message	Date
Zakaria El OrcheandClaude Sonnet 5	5a2aaf5a07	feat(core): HTTP/2 Phase 1 — HTTP/1.1 hardening and protocol negotiation ... Fixes the request-smuggling and resource-exhaustion debt in the existing HTTP/1.1 parser, and adds the ALPN/h2c-preface negotiation seam so a connection's protocol is decided once, before any request is parsed, per flash/docs/http2/IMPLEMENTATION-PLAN.md Phase 1. Existing-code defects fixed (EX-nn): - EX-02: reject Content-Length + Transfer-Encoding together (RFC 9112 6.1 CL.TE/TE.CL smuggling), and conflicting duplicate Content-Length values. - EX-03: strict, overflow-safe Content-Length parsing, replacing a parser that silently skipped non-digit bytes ("5abc" -> 5, "-1" -> 1). - EX-07: header-read / idle-keep-alive / body-read timeouts enforced by an absolute deadline (dev.relism.flash.transport.BufferedByteSource), not merely Socket#setSoTimeout, which never trips against a peer trickling one byte per read within the window. - EX-08: header count / name length / value length / request-line length bounds (Http1Limits), 431 on violation. - EX-10: ChunkedInputStream now reads through BufferedByteSource instead of the raw unbuffered socket stream, and the header-parser's read-ahead bytes are handed over via a zero-copy prependOnce() instead of a SequenceInputStream/ByteArrayInputStream pair. - EX-17: HttpStatus's status-code bound is computed from values() instead of a hand-maintained constant that silently threw ArrayIndexOutOfBoundsException when a code above it was added; added 421, 431, 505, 507, 511 and others HTTP/2 and this hardening need. - EX-18: bare-CR desync and obsolete line folding rejected. - EX-30: the TLS handshake is forced explicitly, under a timeout, before any protocol decision -- SSLSocket#getApplicationProtocol() returned null until the handshake had run, and nothing previously forced it. - EX-31: TLS 1.2 cipher suites on the RFC 9113 Appendix A blocklist are filtered out of a listener's enabled set whenever it offers h2 via ALPN. - EX-35 (found in this phase): Transfer-Encoding values listing multiple codings ("gzip, chunked") were silently treated as not chunked at all, corrupting the message boundary -- only the whole value was compared. - EX-36 (found in this phase): a header line with no ':' was silently skipped instead of rejected. New: - dev.relism.flash.transport.BufferedByteSource: the single buffered, deadline-aware, peekable view over a connection's inbound bytes. - dev.relism.flash.transport.ProtocolNegotiator/NegotiatedProtocol: ALPN and h2c prior-knowledge detection. In this phase an H2 result is always closed cleanly -- there is no Http2Connection to hand off to until Phase 8. FlashConfiguration.http2Enabled gates the h2c preface peek. - dev.relism.flash.exceptions.MalformedRequestException: a typed, status-carrying rejection distinct from HttpException, caught at the parse site so a malformed request never reaches the handler chain or the user's exception handler, and the connection is always closed. Two small plan-document corrections recorded as DEC-12 (Phase 1's Files list omitted BufferedByteSource.java and MalformedRequestException.java; the request-line-length check description pointed at the wrong offset). DEC-13/DEC-14 record the deadline and exception-hierarchy designs. 277/277 tests green (flash module), run twice for stability of the new wall-clock-based HttpServerTimeoutTest cases. Whole-repo build green. h1 benchmark regression check is left unverified in the plan's DoD: no JMH harness exists yet (Phase 3 deliverable). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-13 11:40:03 +00:00
Zakaria El OrcheandClaude Sonnet 5	db6e4a4d0c	feat(core): HTTP/2 Phase 0 — groundwork (limits, error model, decision log) ... Establishes the package layout, limits/error model and decision-log convention that every later HTTP/2 phase depends on, per flash/docs/http2/IMPLEMENTATION-PLAN.md Phase 0. - dev.relism.flash.h2: package-info (architecture overview), Http2ErrorCode (the 14 RFC 9113 §7 codes with precomputed 4-byte wire encodings), Http2Exception (connection error -> GOAWAY) and Http2StreamException (stream error -> RST_STREAM), neither extending IOException, both with stack-trace capture disabled on the hot rejection path. - Http2Limits: every bound Phase 0 requires (concurrent streams, frame size, header list size, CONTINUATION/reset/settings/ping rate bounds, flow-control windows, HPACK table size/string length, assembly and idle timeouts), each documented with the attack or RFC clause it addresses. - dev.relism.flash.http.Http1Limits: the h1 bounds needed by EX-03 (strict Content-Length) and EX-08 (header count/size limits). - flash/docs/http2/DECISIONS.md seeded with DEC-01..DEC-11 (the ten decisions implied by the plan itself, plus DEC-11 recording that commits keep scope `core` rather than adding `h2` to AGENTS.md). - flash/docs/http2/IMPLEMENTATION-PLAN.md: added the Progress Ledger (tracks phase status across sessions) and checked off Phase 0's DoD. 19 new tests, full flash module suite green (226/226). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-13 10:59:49 +00:00