mirror of
https://github.com/basecamp/once-campfire.git
synced 2026-10-08 07:40:08 +09:00
Marcello Costagliola
53520d4444
Since push delivery was pinned to the IP resolved and guarded for it, every push opens a new TCP and TLS connection: Net::HTTP::Persistent looks the host up itself and can't be pinned. The handshake is one or two extra round trips for every push. WebPush::Connections keeps the pinned connections open for 30 seconds and hands one out again only to a delivery whose own, fresh resolution returned the same address for the same host. Net::HTTP only ever reconnects to that address, so no request goes to an address the guard didn't just approve. A connection the push service closed while idle is replaced before the push is written; once it's written, a dropped connection raises ConnectionLost instead of sending the push twice or invalidating the subscription. A delivery without a resolved IP is no longer sent at all, and net-http-persistent goes. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0142qgjggdJ2KDdGk7RF9Xm9
65 lines
1.2 KiB
Ruby
65 lines
1.2 KiB
Ruby
source "https://rubygems.org"
|
|
|
|
git_source(:github) { |repo| "https://github.com/#{repo}.git" }
|
|
|
|
# Rails
|
|
gem "rails", github: "rails/rails", branch: "main"
|
|
gem "ostruct"
|
|
gem "benchmark"
|
|
|
|
# Drivers
|
|
gem "sqlite3"
|
|
gem "redis", "~> 5.4"
|
|
|
|
# Deployment
|
|
gem "puma", "~> 7.2", ">= 7.2.1"
|
|
|
|
# Jobs
|
|
gem "resque", "~> 2.7.0"
|
|
gem "resque-pool", "~> 0.7.1"
|
|
|
|
# Assets
|
|
gem "propshaft", github: "rails/propshaft"
|
|
gem "importmap-rails", github: "rails/importmap-rails"
|
|
|
|
# Hotwire
|
|
gem "turbo-rails", github: "hotwired/turbo-rails"
|
|
gem "stimulus-rails"
|
|
|
|
# Rich text
|
|
gem "lexxy", "~> 0.9.24"
|
|
|
|
# Media handling
|
|
gem "image_processing", ">= 1.2"
|
|
|
|
# Telemetry
|
|
gem "sentry-ruby"
|
|
gem "sentry-rails"
|
|
|
|
# Other
|
|
gem "bcrypt"
|
|
gem "web-push"
|
|
gem "rqrcode"
|
|
gem "rails_autolink"
|
|
gem "geared_pagination"
|
|
gem "jbuilder"
|
|
gem "surfguard", github: "basecamp/surfguard" # The SSRF address policy behind RestrictedHTTP
|
|
gem "kredis"
|
|
gem "platform_agent"
|
|
gem "thruster"
|
|
|
|
group :development, :test do
|
|
gem "debug"
|
|
gem "rubocop-rails-omakase", require: false
|
|
gem "bundler-audit", require: false
|
|
gem "faker", require: false
|
|
gem "brakeman", require: false
|
|
end
|
|
|
|
group :test do
|
|
gem "capybara"
|
|
gem "mocha"
|
|
gem "selenium-webdriver"
|
|
gem "webmock", require: false
|
|
end
|