Marcus Efraimsson 9da278c044 Plugins: Make proxy endpoints not leak sensitive HTTP headers ...

Fixes CVE-2022-31130

(cherry picked from commit 40b319d3d6a9945c05709ce8d4679407f6ccadf0)

2022-10-11 13:04:37 +03:00

..

cookies

Backend: Remove more globals (#29644)

2020-12-15 19:09:04 +01:00

csrf

CSRF: Fix additional headers option (#50629)

2022-07-13 19:28:59 +01:00

auth_test.go

Chore: Remove bus from contexthandler (#47374)

2022-04-06 16:31:26 +02:00

auth.go

Access Control: Allow dashboard admins to query org users (#51652)

2022-07-04 10:43:06 +01:00

csp.go

Macaron: convert CSP middleware (#37672)

2021-08-10 09:03:22 +02:00

dashboard_redirect_test.go

Chore: Remove endpoints that contain the slug field (#35104)

2021-06-03 16:20:13 +03:00

dashboard_redirect.go

Chore: Remove endpoints that contain the slug field (#35104)

2021-06-03 16:20:13 +03:00

gziper.go

Chore: replace macaron with web package (#40136)

2021-10-11 14:30:59 +02:00

logger_test.go

Auth: Implement Token URL JWT Auth (#52662)

2022-07-27 16:10:47 +02:00

logger.go

Instrumentation: log the total number of db queries per request (#54647) (#54686)

2022-09-05 11:58:35 +02:00

middleware_basic_auth_test.go

Plugins: Make proxy endpoints not leak sensitive HTTP headers

2022-10-11 13:04:37 +03:00

middleware_jwt_auth_test.go

Plugins: Make proxy endpoints not leak sensitive HTTP headers

2022-10-11 13:04:37 +03:00

middleware_test.go

Plugins: Make proxy endpoints not leak sensitive HTTP headers

2022-10-11 13:04:37 +03:00

middleware.go

Middleware: Don't require HTTPS for HSTS headers to be emitted (#35147)

2022-01-28 07:23:28 +01:00

org_redirect_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

org_redirect.go

Chore: Remove bus from contexthandler (#47458)

2022-04-08 10:33:19 +02:00

quota_test.go

Add delete user from other services/stores (#51912)

2022-07-15 18:06:44 +02:00

quota.go

Chore: Remove bus from quota (#45143)

2022-02-10 12:42:06 +01:00

recovery_test.go

Chore: Remove bus (#47511)

2022-04-08 16:15:06 +02:00

recovery.go

Chore: Fix log filters (#44681)

2022-02-03 23:20:02 +08:00

request_metrics.go

instrumentation: add buckets to catch very slow requests (#51492)

2022-07-26 12:38:59 +03:00

request_test.go

Instrumentation: Define handlers for requests that are not handled with named handlers (#50613)

2022-06-14 07:58:20 +02:00

request_tracing.go

Tracing: Fix OpenTelemetry Jaeger context propagation (#53269) (#53724)

2022-08-15 10:47:08 +02:00

testing.go

Chore: Remove bus from authproxy (#46936)

2022-03-30 17:01:24 +02:00

validate_host.go

Chore: replace macaron with web package (#40136)

2021-10-11 14:30:59 +02:00