fab de87ab2019 fix: ReloadRules deadlock, DNS blacklist bypass, IP blacklist data race (#132) ...

ReloadRules had the identical self-deadlock fixed in ReloadConfig in v0.3.7 --
and it is the primary hot-reload branch, since the watcher routes any path
containing "rule" to it. Editing rules.json wedged the server on v0.3.7 and
v0.3.8.

isDNSBlacklisted only lowercased and trimmed the Host header, so
"evil.example:8080" and "evil.example." missed an entry for "evil.example".
r.Host carries the port on any non-default port -- which every example here
uses -- so those deployments had no DNS filtering, and an explicit ":443" made
it a one-header bypass. Hosts are now normalised.

isIPBlacklisted read m.ipBlacklist without m.mu while ReloadConfig swapped it
under the lock. Now read under RLock. Suite green under -race.

Two of the three were found by the automated review on #130.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-07-28 22:03:05 +02:00

..

.vitepress

docs: fix two review findings from #122, and guard the class of bug (#128)

2026-07-28 20:49:21 +02:00

public

docs: brand mark, social preview, and hero fixes for the docs site (#127)

2026-07-28 13:24:28 +02:00

add-package-guide.md

fix: ReloadRules deadlock, DNS blacklist bypass, IP blacklist data race (#132)

2026-07-28 22:03:05 +02:00

attacks.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

blacklists.md

fix: ReloadRules deadlock, DNS blacklist bypass, IP blacklist data race (#132)

2026-07-28 22:03:05 +02:00

caddy-waf-bw.drawio.png

…

caddy-waf-elk.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

caddy-waf-elk.png

…

caddy-waf-ui.png

…

caddytest.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

configuration.md

fix: ReloadRules deadlock, DNS blacklist bypass, IP blacklist data race (#132)

2026-07-28 22:03:05 +02:00

docker.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

dynamicupdates.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

geoblocking.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

index.md

docs: brand mark, social preview, and hero fixes for the docs site (#127)

2026-07-28 13:24:28 +02:00

installation.md

fix: ReloadRules deadlock, DNS blacklist bypass, IP blacklist data race (#132)

2026-07-28 22:03:05 +02:00

introduction.md

…

metrics.md

fix: ReloadRules deadlock, DNS blacklist bypass, IP blacklist data race (#132)

2026-07-28 22:03:05 +02:00

prometheus.md

…

ratelimit.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

rules.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

scripts.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00

testing.md

docs: publish the docs tree as a VitePress site on GitHub Pages (#124)

2026-07-28 12:50:57 +02:00