caddy/modules/caddyhttp/reverseproxy/fastcgi
bzyy1024 45ba3278b5
fastcgi: fix HTTPoxy vulnerability (#7934)
* Implement HTTPoxy mitigation in FastCGI
Added HTTPoxy mitigation to prevent trusting client-supplied Proxy header for HTTP_PROXY environment variable.

* Implement test for HTTPoxy vulnerability protection
Add test to ensure HTTPoxy vulnerability is mitigated by dropping client-supplied Proxy headers.

* gofmt: format code
* revert unrelated gofmt change to replacer_test.go
2026-08-19 13:07:24 +10:00
..
caddyfile.go Use slices.Contains to simplify code (#7039) 2025-05-31 12:03:06 -06:00
client.go chore: clean up wording and typo fixes (#7745) 2026-05-20 16:36:30 +10:00
client_test.go use math/rand/v2 instead of math/rand (#7413) 2026-02-11 09:15:51 -07:00
fastcgi.go fastcgi: fix HTTPoxy vulnerability (#7934) 2026-08-19 13:07:24 +10:00
fastcgi_test.go fastcgi: fix HTTPoxy vulnerability (#7934) 2026-08-19 13:07:24 +10:00
header.go fastcgi: Optimize FastCGI transport (#4978) 2022-09-02 16:57:55 -06:00
pool.go fastcgi: Optimize FastCGI transport (#4978) 2022-09-02 16:57:55 -06:00
reader.go fastcgi: Optimize FastCGI transport (#4978) 2022-09-02 16:57:55 -06:00
record.go chore: ugh, lint fix... (#7275) 2025-09-26 03:14:48 -04:00
writer.go chore: fix golangci-lint error G602 in caddyhttp (#7334) 2025-11-03 03:04:55 +00:00