Ivan Valdes 838cd9aa00 server: disable redirects in peer communication ...

Disable following redirects from peer HTTP communication on the client's side.
Etcd server may run into SSRF (Server-side request forgery) when adding a new
member. If users provide a malicious peer URL, the existing etcd members may be
redirected to another unexpected internal URL when getting the new member's
version.

Signed-off-by: Ivan Valdes <ivan@vald.es>

2023-12-13 09:21:53 -08:00

..

api

Merge pull request #16990 from YaoC/backport-12890

2023-11-23 13:56:28 +00:00

etcdserverpb

Formatted source code for go 1.19.6.

2023-02-20 12:44:14 +13:00

apply_auth_test.go

Add first unit test for authApplierV3

2023-06-16 10:08:47 +02:00

apply_auth.go

Add first unit test for authApplierV3

2023-06-16 10:08:47 +02:00

apply_v2.go

server: Added config parameter experimental-warning-apply-duration

2021-03-03 12:14:30 -05:00

apply.go

Backport-3.4 etcdserver/util.go: reduce memory when logging range requests

2021-04-22 15:07:44 -07:00

backend.go

etcdserver, et al: add --unsafe-no-fsync flag

2020-06-04 20:19:28 -07:00

cluster_util_test.go

*: revert module import paths

2019-05-28 15:39:35 -07:00

cluster_util.go

server: disable redirects in peer communication

2023-12-13 09:21:53 -08:00

config_test.go

*: revert module import paths

2019-05-28 15:39:35 -07:00

config.go

server: Require either cluster version v3.6 or --experimental-enable-lease-checkpoint-persist to persist lease remainingTTL

2022-07-22 10:28:29 +02:00

consistent_index_test.go

etcdserver: update LICENSE header

2016-05-12 20:49:40 -07:00

consistent_index.go

etcdserver: update LICENSE header

2016-05-12 20:49:40 -07:00

corrupt_test.go

etcdserver: add cluster id check for hashKVHandler

2023-11-22 16:55:18 +00:00

corrupt.go

server: disable redirects in peer communication

2023-12-13 09:21:53 -08:00

doc.go

etcdserver: update LICENSE header

2016-05-12 20:49:40 -07:00

errors.go

support linearizable renew lease for 3.4

2022-07-19 13:34:55 +08:00

metrics.go

etcdserver: add OS level FD metrics

2020-08-12 18:38:35 -07:00

quota.go

Backport: non mutating requests pass through quotaKVServer when NOSPACE

2022-07-21 15:06:09 -07:00

raft_test.go

fix the potential data loss for clusters with only one member

2022-09-05 14:15:47 +02:00

raft.go

Formatted source code for go 1.19.6.

2023-02-20 12:44:14 +13:00

server_access_control.go

etcdserver: replace "hostWhitelist" with "AccessController"

2018-03-27 06:25:44 -07:00

server_test.go

support linearizable renew lease for 3.4

2022-07-19 13:34:55 +08:00

server.go

etcdserver: return membership.ErrIDNotFound when the memberID not found

2023-01-17 06:27:31 +08:00

snapshot_merge.go

*: revert module import paths

2019-05-28 15:39:35 -07:00

storage.go

etcdserver, et al: add --unsafe-no-fsync flag

2020-06-04 20:19:28 -07:00

util_test.go

etcdserver: fix nil pointer panic for readonly txn

2022-12-06 18:09:47 +08:00

util.go

etcdserver: fix nil pointer panic for readonly txn

2022-12-06 18:09:47 +08:00

v2_server.go

*: revert module import paths

2019-05-28 15:39:35 -07:00

v3_server.go

etcdserver: check authinfo if it is not InternalAuthenticateRequest.

2023-10-25 12:51:30 -07:00