Skip to content

Update paths in http-request.rs test - #293

Merged
andreiltd merged 1 commit into
WebAssembly:mainfrom
alexcrichton:update-http-request-test
Oct 15, 2026
Merged

andreiltd merged 1 commit into
WebAssembly:mainfrom
alexcrichton:update-http-request-test

Conversation

@alexcrichton

Copy link
Copy Markdown
Collaborator

This commit updates the http-request.rs test to change its assertion that some preexisting paths that were asserted to work are actually asserted to fail. This is being made as a part of the response to GHSA-5qpp-g3j2-8frx, a vulnerability in Wasmtime, where the belief is that this test was erroneous in accepting these paths previously and they should instead be disallowed.

This commit updates the `http-request.rs` test to change its assertion
that some preexisting paths that were asserted to work are actually
asserted to fail. This is being made as a part of the response to
GHSA-5qpp-g3j2-8frx, a vulnerability in Wasmtime, where the belief is
that this test was erroneous in accepting these paths previously and
they should instead be disallowed.
@alexcrichton

Copy link
Copy Markdown
Collaborator Author

cc @pchickey and @lann on this

@pchickey

Copy link
Copy Markdown
Contributor

I discussed this issue with Alex and agree with this change.

@andreiltd

Copy link
Copy Markdown
Collaborator

Thanks! I will update jco.

@andreiltd
andreiltd merged commit 761c6f5 into WebAssembly:main Oct 15, 2026
5 checks passed
andreiltd added a commit to andreiltd/jco that referenced this pull request Oct 15, 2026
vados-cosmonic pushed a commit to andreiltd/jco that referenced this pull request Oct 15, 2026
vados-cosmonic pushed a commit to vados-cosmonic/jco that referenced this pull request Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants