Ivan Valdes 98aa466905 server: disable redirects in peer communication ...

Disable following redirects from peer HTTP communication on the client's side.
Etcd server may run into SSRF (Server-side request forgery) when adding a new
member. If users provide a malicious peer URL, the existing etcd members may be
redirected to another unexpected internal URL when getting the new member's
version.

Signed-off-by: Ivan Valdes <ivan@vald.es>

2023-12-05 10:59:25 -08:00

..

api

server: Split metrics and health code

2023-11-27 09:31:00 -08:00

cindex

fix the data inconsistency issue by adding a txPostLockHook into the backend

2022-04-08 20:37:34 +08:00

apply_auth_test.go

Add first unit test for authApplierV3

2023-06-16 09:42:09 +02:00

apply_auth.go

Add first unit test for authApplierV3

2023-06-16 09:42:09 +02:00

apply_test.go

[backport 3.5] server: don't panic in readonly serializable txn

2022-09-01 01:01:50 -07:00

apply_v2.go

applyV2 should reapply on backend only once

2021-05-18 23:16:59 -07:00

apply.go

[backport 3.5] server: don't panic in readonly serializable txn

2022-09-01 01:01:50 -07:00

backend.go

fix the data inconsistency issue by adding a txPostLockHook into the backend

2022-04-08 20:37:34 +08:00

cluster_util_test.go

Migrate dependencies pkg/foo -> client/pkg/foo

2021-04-07 00:38:47 +02:00

cluster_util.go

server: disable redirects in peer communication

2023-12-05 10:59:25 -08:00

corrupt_test.go

etcdserver: add cluster id check for hashKVHandler

2023-10-17 13:27:47 +02:00

corrupt.go

server: disable redirects in peer communication

2023-12-05 10:59:25 -08:00

doc.go

server: Move server files to 'server' directory.

2020-10-26 12:57:19 +01:00

errors.go

support linearizable renew lease

2022-04-12 14:12:45 +08:00

metrics.go

Add metric tracking apply method duration:

2020-11-06 11:11:16 +01:00

quota.go

[3.5] Backport: non mutating requests pass through quotaKVServer when NOSPACE

2022-12-05 21:04:09 +00:00

raft_test.go

Backport go_srcs_in_module changes and fix goword failures.

2023-02-24 22:01:41 +13:00

raft.go

Formatted source code for go 1.19.6.

2023-02-20 21:33:59 +13:00

server_access_control.go

server: Move server files to 'server' directory.

2020-10-26 12:57:19 +01:00

server_test.go

Backport go_srcs_in_module changes and fix goword failures.

2023-02-24 22:01:41 +13:00

server.go

server: Cover V3 health with tests

2023-11-27 09:31:00 -08:00

snapshot_merge.go

Merge get_logger() & Logger() method.

2021-03-14 14:05:17 +01:00

storage.go

etcdserver: process the scenaro of the last WAL record being partially synced to disk

2023-01-08 05:30:01 +08:00

util_bench_test.go

server: skip unnecessary sprintf which executes proto.Size()

2021-06-03 13:21:23 -07:00

util_test.go

etcdserver: fix nil pointer panic for readonly txn

2022-12-06 18:16:49 +08:00

util.go

etcdserver: fix nil pointer panic for readonly txn

2022-12-06 18:16:49 +08:00

v2_server.go

applyV2 should reapply on backend only once

2021-05-18 23:16:59 -07:00

v3_server.go

etcdserver: protect lease timetilive with auth

2023-05-08 22:45:38 +09:00

zap_raft_test.go

ClientV3 tests use integration.NewClient that configures proper logger.

2021-04-29 18:18:34 +02:00

zap_raft.go

server: Move server files to 'server' directory.

2020-10-26 12:57:19 +01:00