Andy Balholm
Andy Balholm
I don't know anything about that middleware, but you could try an encoder function that just returns w instead of creating a brotli Writer. The response won't be readable, but...
This code was automatically translated from C, and the `if` statement you're looking at is an expansion of the `BROTLI_ALLOC` macro (https://github.com/google/brotli/blob/440e03642b891968a76b6d088d70f01f06e0c349/c/enc/metablock_inc.h#L75C1-L75C66). Likely the `nil` check makes sense in some...
Redwood natively supports time-of-day restrictions. But limiting the amount of time spent online per day is another story…
I'm not really opposed to updating the dependencies, but the CVE you linked does not affect Cascadia, because it doesn't use HTTP.
I'd rather not add the WithCustom function. If the user wants something truly custom, he can always handle the header negotiation himself…
If someone wants to customize as far as window size, they should be doing the compression themselves instead of using a convenience function. But you could definitely make the WithLevels...
`NegotiateContentEncoding` already is a public function, in github.com/golang/gddo. I copied it into the brotli package to avoid pulling in a large dependency.
I've added `HTTPCompressorWithLevel`, which has one level parameter, used for both brotli and gzip.
Encrypted client hello sounds like something we should need to do something about, but we haven't seen any sign of it in the wild. It would be much easier to...
Yes, I think that would be a good idea.