brenno/Hiero
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enforce HTTPS and response limits on AIP remote fetches #24

Merged
brenno merged 2 commits from security/aip-https-and-limits into main 2026-07-01 00:03:17 +00:00
Conversation 0 Commits 2 Files changed 13 +345 -108
brenno commented 2026-06-30 23:58:08 +00:00
Owner
Copy link

Summary

  • Upgrade Estonian eAIP AD2/chart URLs from http:// to https://eaip.eans.ee/....
  • Introduce getAipResource / headAipResource with HTTPS enforcement and size caps (5 MB HTML, 25 MB charts).
  • Route all AipRepository and AipDeResolver remote downloads through the new guards.
  • Add regression tests for escapeHtml, AIP HTTP guards, and HTTPS-only config URLs.

Test plan

  • flutter test (417 tests)
  • Open an Estonian aerodrome AIP and confirm charts still load
  • Spot-check a DE DFS chart (JS host) still renders in the WebView

Part of the security hardening track (S1 + S2).

## Summary - Upgrade Estonian eAIP AD2/chart URLs from `http://` to `https://eaip.eans.ee/...`. - Introduce `getAipResource` / `headAipResource` with HTTPS enforcement and size caps (5 MB HTML, 25 MB charts). - Route all `AipRepository` and `AipDeResolver` remote downloads through the new guards. - Add regression tests for `escapeHtml`, AIP HTTP guards, and HTTPS-only config URLs. ## Test plan - [x] `flutter test` (417 tests) - [ ] Open an Estonian aerodrome AIP and confirm charts still load - [ ] Spot-check a DE DFS chart (JS host) still renders in the WebView Part of the security hardening track (S1 + S2).
Enforce HTTPS and response limits on AIP remote fetches.
Some checks failed
Flutter CI / analyze-and-test (pull_request) Has been cancelled
Details
05845c7ace 
Upgrade Estonian eAIP URLs to HTTPS, route AIP repository and DE resolver
downloads through getAipResource with size caps, and add regression tests
for escapeHtml and AIP HTTP guards.

Co-authored-by: Cursor <cursoragent@cursor.com>
Log UI best-effort failures instead of silent catch (_).
Some checks failed
Flutter CI / analyze-and-test (pull_request) Has been cancelled
Details
be7076af72 
Replace ignored catch blocks in lib/ui with appLog.fine diagnostics and add
a regression test that forbids catch (_) in the UI layer.

Co-authored-by: Cursor <cursoragent@cursor.com>
brenno merged commit 5fb25c3f0c into main 2026-07-01 00:03:17 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
brenno/Hiero!24
No description provided.