Release v5.6.0-pre.3 (#2037)

* Release v5.6.0-pre.3

* Remove duplicate bug fix entry in CHANGELOG

Removed duplicate bug fix entry for Host header poisoning in version 5.6.0-pre.3.

* Update create_terrain_mbtiles.js

* Update package-lock.json

---------

Co-authored-by: acalcutt <3792408+acalcutt@users.noreply.github.com>
Co-authored-by: Andrew Calcutt <acalcutt@techidiots.net>

Author: github-actions[bot]

CHANGELOG.md

@@ -7,13 +7,14 @@
 ### 🐞 Bug fixes
 - _...Add new stuff here..._
 
-## 5.6.0-pre.2
+## 5.6.0-pre.3
 ### ✨ Features and improvements
 - feat: Add ignore-missing-files cli option to avoid crashing at startup ([#1896](https://github.com/maptiler/tileserver-gl/pull/1896)) (by [andrewlaguna824](https://github.com/andrewlaguna824))
 
 ### 🐞 Bug fixes
 - fix: correctly handle public url in tileJSON response ([#1963](https://github.com/maptiler/tileserver-gl/pull/1963)) (by [andrewlaguna824](https://github.com/andrewlaguna824))
 - Fix regex to allow underscore in font name ([#1986](https://github.com/maptiler/tileserver-gl/pull/1986)) (by [spatialillusions](https://github.com/spatialillusions))
+- fix: mitigate Host header poisoning (HNP) with TILESERVER_GL_ALLOWED_… ([#2032](https://github.com/maptiler/tileserver-gl/pull/2032)) (by [LeaveerWang](https://github.com/LeaveerWang))
 
 ## 5.5.0
 - Add S3 support for PMTiles with multiple AWS credential profiles (https://github.com/maptiler/tileserver-gl/pull/1779) by @acalcutt

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "tileserver-gl",
-  "version": "5.6.0-pre.2",
+  "version": "5.6.0-pre.3",
   "description": "Map tile server for JSON GL styles - vector and server side generated raster tiles",
   "main": "src/main.js",
   "bin": {

package.json

@@ -11,6 +11,10 @@ import { fileURLToPath } from 'url';
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = path.dirname(__filename);
 
+/**
+ *
+ * @param elevation
+ */
 function elevationToMapboxRGB(elevation) {
   // elevation = -10000 + (R * 65536 + G * 256 + B) * 0.1
   // (R * 65536 + G * 256 + B) = (elevation + 10000) / 0.1
@@ -21,6 +25,11 @@ function elevationToMapboxRGB(elevation) {
   return { r, g, b };
 }
 
+/**
+ *
+ * @param tileSize
+ * @param elevation
+ */
 function createTerrainTile(tileSize, elevation) {
   const canvas = createCanvas(tileSize, tileSize);
   const ctx = canvas.getContext('2d');
@@ -33,6 +42,12 @@ function createTerrainTile(tileSize, elevation) {
   return canvas.toBuffer('image/png');
 }
 
+/**
+ *
+ * @param db
+ * @param sql
+ * @param params
+ */
 function runDb(db, sql, params = []) {
   return new Promise((resolve, reject) => {
     db.run(sql, params, function (err) {
@@ -42,6 +57,10 @@ function runDb(db, sql, params = []) {
   });
 }
 
+/**
+ *
+ * @param outputPath
+ */
 async function createTerrainMbtiles(outputPath) {
   const db = new sqlite3.Database(outputPath);