Pull request 2681: 8276-fix-ech-base64

Updates #8276.

Squashed commit of the following:

commit d92a630ba1c01a1a516f723c95421a9f4a9c53d3
Merge: b6fcfbb40 af9142e98
Author: Ainar Garipov <a.garipov@adguard.com>
Date:   Wed Jun 17 16:07:38 2026 +0300

    Merge branch 'master' into 8276-fix-ech-base64

commit b6fcfbb406
Author: Ainar Garipov <a.garipov@adguard.com>
Date:   Wed Jun 17 14:17:25 2026 +0300

    all: fix chlog

commit 1f3ded96fd
Author: Ainar Garipov <a.garipov@adguard.com>
Date:   Tue Jun 16 21:17:52 2026 +0300

    dnsforward: do not require padding when parsing ech
This commit is contained in:
Ainar Garipov 2026-06-17 13:18:16 +00:00
parent af9142e98e
commit 5d3859bd36
2 changed files with 11 additions and 8 deletions

View file

@ -18,12 +18,6 @@ See also the [v0.107.78 GitHub milestone][ms-v0.107.78].
NOTE: Add new changes BELOW THIS COMMENT.
-->
### Added
- Improved updater logging to give users more insight into the problem with version updating ([#8410]).
[#8410]: https://github.com/AdguardTeam/AdGuardHome/issues/8410
### Security
- Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.4][go-1.26.4].
@ -32,6 +26,12 @@ NOTE: Add new changes BELOW THIS COMMENT.
- The size of rulelists is limited. This is necessary to prevent a user's machine from becoming overloaded if the filter source misbehaves.
### Added
- Improved updater logging to give users more insight into the problem with version updating ([#8410]).
[#8410]: https://github.com/AdguardTeam/AdGuardHome/issues/8410
### Changed
- The interval of filter updates can now be set to any number of ours between 0 and 365 days in the configuration file.
@ -42,10 +42,13 @@ NOTE: Add new changes BELOW THIS COMMENT.
### Fixed
- The parsing of the `ech` parameter in DNS rewrite rules for the HTTPS record type ([#8276]).
- Blocked services check on the Custom filtering rules page does not work properly without specifying of a client.
[rfc9113]: https://datatracker.ietf.org/doc/html/rfc9113
[#8276]: https://github.com/AdguardTeam/AdGuardHome/issues/8276
[go-1.26.4]: https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw
[rfc9113]: https://datatracker.ietf.org/doc/html/rfc9113
<!--
NOTE: Add new changes ABOVE THIS COMMENT.

View file

@ -62,7 +62,7 @@ var svcbKeyHandlers = map[string]svcbKeyHandler{
},
"ech": func(ctx context.Context, l *slog.Logger, valStr string) (val dns.SVCBKeyValue) {
ech, err := base64.StdEncoding.DecodeString(valStr)
ech, err := base64.RawStdEncoding.DecodeString(valStr)
if err != nil {
l.DebugContext(ctx, "can't parse svcb/https ech, ignoring", slogutil.KeyError, err)