[pull] master from webtorrent:master

AUTHORS.md

@@ -65,5 +65,6 @@
 - Tom Snelling ([email protected])
 - Cas_ ([email protected])
 - Arsène Fougerouse ([email protected])
+- Brad Marsden ([email protected])
 
 #### Generated by tools/update-authors.sh.

CHANGELOG.md

@@ -1,3 +1,10 @@
+## [11.0.2](https://github.com/webtorrent/bittorrent-tracker/compare/v11.0.1...v11.0.2) (2024-03-12)
+
+
+### Bug Fixes
+
+* **parse-http:** ignore announcements from peers with invalid announcement ports. ([#513](https://github.com/webtorrent/bittorrent-tracker/issues/513)) ([fe75272](https://github.com/webtorrent/bittorrent-tracker/commit/fe75272d51653e626583689081afb0b7aeadb84f))
+
 ## [11.0.1](https://github.com/webtorrent/bittorrent-tracker/compare/v11.0.0...v11.0.1) (2024-01-16)
 
 

lib/server/parse-http.js

@@ -22,7 +22,7 @@ export default function (req, opts) {
     params.peer_id = bin2hex(params.peer_id)
 
     params.port = Number(params.port)
-    if (!params.port) throw new Error('invalid port')
+    if (!params.port || params.port <= 0 || params.port > 65535) throw new Error('invalid port')
 
     params.left = Number(params.left)
     if (Number.isNaN(params.left)) params.left = Infinity

package.json

@@ -1,7 +1,7 @@
 {
   "name": "bittorrent-tracker",
   "description": "Simple, robust, BitTorrent tracker (client & server) implementation",
-  "version": "11.0.1",
+  "version": "11.0.2",
   "author": {
     "name": "WebTorrent LLC",
     "email": "[email protected]",