Ivan Valdes 8578e07117

server: disable redirects in peer communication ...

Disable following redirects from peer HTTP communication on the client's side.
Etcd server may run into SSRF (Server-side request forgery) when adding a new
member. If users provide a malicious peer URL, the existing etcd members may be
redirected to another unexpected internal URL when getting the new member's
version.

Signed-off-by: Ivan Valdes <ivan@vald.es>

2023-12-04 13:53:28 -08:00

..

api

Revert "Switch to validating v3 when v2 and v3 are synchronized"

2023-12-03 18:12:09 +01:00

apply

Remove shouldApplyV3 from the v3 applier

2023-11-24 16:13:25 +01:00

cindex

Separate Writer interface from BatchTx interfaces

2023-07-31 10:18:01 +02:00

errors

Rename etcdserver/etcderrors package to etcdserver/errors.

2022-05-20 14:32:04 +02:00

txn

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

version

*: fix unused issue

2023-09-25 19:37:18 +08:00

adapters.go

Rename EtcdServer.Id with EtcdServer.MemberId.

2022-05-20 14:32:04 +02:00

apply_v2.go

Cleanup v2 applier

2023-11-23 15:41:13 +01:00

bootstrap_test.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

bootstrap.go

feat: enable unparam lint

2023-10-17 21:24:13 +08:00

cluster_util_test.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

cluster_util.go

server: disable redirects in peer communication

2023-12-04 13:53:28 -08:00

corrupt_test.go

feat: enable unparam lint

2023-10-17 21:24:13 +08:00

corrupt.go

server: disable redirects in peer communication

2023-12-04 13:53:28 -08:00

doc.go

server: Move server files to 'server' directory.

2020-10-26 12:57:19 +01:00

metrics.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

raft_test.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

raft.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

server_access_control_test.go

tests(etcdserver): refactor

2022-12-16 10:09:04 +09:00

server_access_control.go

server: Move server files to 'server' directory.

2020-10-26 12:57:19 +01:00

server_test.go

Merge pull request #17015 from serathius/extract-membership-applier

2023-11-27 19:59:21 +01:00

server.go

Revert "Switch to validating v3 when v2 and v3 are synchronized"

2023-12-03 18:12:09 +01:00

snapshot_merge.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

util_test.go

etcdserve: format the source code

2022-12-02 13:00:59 +08:00

util.go

Apply encapsulation: Cleanup metrics reporting.

2022-05-20 14:32:04 +02:00

v2_server.go

Remove code used to make v2 proposals

2023-11-19 22:39:33 +01:00

v3_server.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00

zap_raft_test.go

Goimports: Apply automated fixing to test files as well.

2022-12-29 13:04:45 +01:00

zap_raft.go

*: enable goimports in verify-lint

2023-09-21 21:14:09 +08:00