forked from bitcoinafterlife/bal-server
- Point 5 (SSRF): Add URL validation for WELIST_SERVER_URL (src/validation.rs) - Point 6 (DB Access): Add DB path validation, symlink check, WAL mode (open_db) - Point 8 (HTTPS): Extract nginx config, add deployment checklist, bind warnings - Point 9 (Input Validation): Add NETWORKS check (404 for unknown), txid 64-hex validation - Optimize echo_push: parse transactions outside DB lock, batch duplicate check, N+1 xpub lookup eliminated via HashSet cache - Optimize echo_info: derive BIP32 address outside DB lock, minimize lock duration - Fix echo_stats SQL injection via parameter binding + add idx_stats_chain index - New regression tests: ssrf_tests, db_path_validation, input_validation_tests
43 lines
1.3 KiB
TOML
43 lines
1.3 KiB
TOML
[package]
|
|
name = "bal_server"
|
|
version = "0.3.0"
|
|
edition = "2024"
|
|
|
|
# See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html
|
|
[dependencies]
|
|
base64 = { version = "0.22.1" }
|
|
bs58 = { version = "0.4.0" }
|
|
bytes = { version = "1.2" }
|
|
bitcoin = { version = "0.32.5" }
|
|
bitcoincore-rpc = { version = "0.19.0" }
|
|
bitcoincore-rpc-json = { version = "0.19.0" }
|
|
byteorder = { version = "1.5.0" }
|
|
confy = { version = "0.6.1" }
|
|
chrono = { version = "0.4.40" }
|
|
env_logger = { version = "0.11.5" }
|
|
hex = { version = "0.4.3" }
|
|
hex-conservative = { version = "0.1.1" }
|
|
actix-web = { version = "4.9.0" }
|
|
actix-governor = { version = "0.6.0" }
|
|
log = { version = "0.4.21" }
|
|
openssl = { version = "0.10.74", features = ["vendored"] }
|
|
sha2 = { version = "0.10.8" }
|
|
serde = { version = "1.0.152", features = ["derive"] }
|
|
serde_json = { version = "1.0.116" }
|
|
sqlite = { version = "0.34.0" }
|
|
regex = { version = "1.10.4" }
|
|
reqwest = { version = "0.12.24", features = ["json","socks"] }
|
|
actix-rt = { version = "2.10.0" }
|
|
tokio = { version = "1", features = ["rt", "net","macros","rt-multi-thread"] }
|
|
url = { version = "2" }
|
|
zmq = { version = "0.10.0" }
|
|
|
|
[[bin]]
|
|
name = "bal-server"
|
|
path = "src/bin/bal-server-actix.rs"
|
|
|
|
[[bin]]
|
|
name = "bal-pusher"
|
|
path = "src/bin/bal-pusher.rs"
|
|
|