From 830407e88f9d40d954356c3754f2647f91d5c06a Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 17:26:00 +0200 Subject: Adding upstream version 5.6.0. Signed-off-by: Daniel Baumann --- modules/workarounds/.packaging/test.config | 4 ++++ modules/workarounds/README.rst | 11 +++++++++++ modules/workarounds/workarounds.lua | 23 +++++++++++++++++++++++ 3 files changed, 38 insertions(+) create mode 100644 modules/workarounds/.packaging/test.config create mode 100644 modules/workarounds/README.rst create mode 100644 modules/workarounds/workarounds.lua (limited to 'modules/workarounds') diff --git a/modules/workarounds/.packaging/test.config b/modules/workarounds/.packaging/test.config new file mode 100644 index 0000000..c420810 --- /dev/null +++ b/modules/workarounds/.packaging/test.config @@ -0,0 +1,4 @@ +-- SPDX-License-Identifier: GPL-3.0-or-later +modules.load('workarounds') +assert(workarounds) +quit() diff --git a/modules/workarounds/README.rst b/modules/workarounds/README.rst new file mode 100644 index 0000000..fcb04aa --- /dev/null +++ b/modules/workarounds/README.rst @@ -0,0 +1,11 @@ +.. SPDX-License-Identifier: GPL-3.0-or-later + +.. _mod-workarounds: + +Module `workarounds` resolver behavior on specific broken sub-domains. +Currently it mainly disables case randomization. + +.. code-block:: lua + + modules.load('workarounds < iterate') + diff --git a/modules/workarounds/workarounds.lua b/modules/workarounds/workarounds.lua new file mode 100644 index 0000000..4ce7c47 --- /dev/null +++ b/modules/workarounds/workarounds.lua @@ -0,0 +1,23 @@ +-- SPDX-License-Identifier: GPL-3.0-or-later +-- Load dependent module +if not policy then modules.load('policy') end + +local M = {} -- the module + +function M.config() + policy.add(policy.suffix(policy.FLAGS('NO_0X20'), { + -- https://github.com/DNS-OARC/dns-violations/blob/master/2017/DVE-2017-0003.md + todname('avqs.mcafee.com'), todname('avts.mcafee.com'), + + -- https://github.com/DNS-OARC/dns-violations/blob/master/2017/DVE-2017-0006.md + -- Obtained via a reverse search on {ns1,ns3}.panthercdn.com. + todname('cdnga.com'), todname('cdngc.com'), todname('cdngd.com'), + todname('cdngl.com'), todname('cdngm.com'), + todname('cdngc.net'), todname('panthercdn.com'), + + todname('magazine-fashion.net.'), + })) +end + +return M + -- cgit v1.2.3