bzyy1024 45ba3278b5 fastcgi: fix HTTPoxy vulnerability (#7934) ...

* Implement HTTPoxy mitigation in FastCGI
Added HTTPoxy mitigation to prevent trusting client-supplied Proxy header for HTTP_PROXY environment variable.

* Implement test for HTTPoxy vulnerability protection
Add test to ensure HTTPoxy vulnerability is mitigated by dropping client-supplied Proxy headers.

* gofmt: format code
* revert unrelated gofmt change to replacer_test.go

2026-08-19 13:07:24 +10:00

..

fastcgi

fastcgi: fix HTTPoxy vulnerability (#7934)

2026-08-19 13:07:24 +10:00

forwardauth

forwardauth: error on duplicate uri subdirective (#7814)

2026-06-10 23:31:04 -04:00

active_health_test.go

reverseproxy: isolate active health-check state per distinct check config (#7916)

2026-08-12 15:20:15 +10:00

addresses_test.go

reverseproxy: do not parse upstream address too early if it contains replaceble parts (#5695)

2023-08-05 23:30:02 +02:00

addresses.go

core: Implement socket activation listeners (#6573)

2024-09-30 10:55:03 -06:00

admin_test.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

admin.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

ascii_test.go

filesystem: Globally declared filesystems, fs directive (#5833)

2024-01-13 20:12:43 +00:00

ascii.go

…

buffering_test.go

reverseproxy: more comments about buffering and add new tests (#6778)

2025-03-07 11:22:43 -07:00

caddyfile.go

reverseproxy: fix misleading handle_response error for extra matcher args (#7869)

2026-07-10 05:40:23 +00:00

client_disconnect_test.go

reverseproxy: log status 499 instead of 0 when client disconnects (#7827)

2026-06-18 13:31:02 +10:00

command.go

cmd: prevent commas in header values from being split (#7268)

2025-09-22 21:12:06 -06:00

copyresponse.go

…

dynamic_upstreams_test.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

headers_test.go

chore: replace interface{} with any for modernization (#7571)

2026-04-11 19:53:12 +03:00

healthchecks.go

reverseproxy: isolate active health-check state per distinct check config (#7916)

2026-08-12 15:20:15 +10:00

hopheaders_test.go

Merge commit from fork

2026-06-12 12:39:01 -06:00

hosts.go

reverseproxy: isolate active health-check state per distinct check config (#7916)

2026-08-12 15:20:15 +10:00

httptransport_test.go

fix: close resources on error paths (#7940)

2026-08-16 21:02:39 +10:00

httptransport.go

fix: close resources on error paths (#7940)

2026-08-16 21:02:39 +10:00

metrics.go

reverseproxy: ignore duplicate collector registration error (#6820)

2025-02-04 10:55:30 +03:00

passive_health_test.go

reverseproxy: Track dynamic upstreams, enable passive healthchecking (#7539)

2026-03-04 15:05:26 -05:00

prepare_request_bench_test.go

reverseproxy: reduce allocation/CPU overhead in request hot paths (#7925)

2026-08-10 15:49:55 +10:00

retries_test.go

reverseproxy: further prevent body closes from dial errors (#7715)

2026-05-12 12:05:50 -06:00

reverseproxy.go

reverseproxy: reduce allocation/CPU overhead in request hot paths (#7925)

2026-08-10 15:49:55 +10:00

selectionpolicies_test.go

fileserver: speed up directory browsing for large directories (#7903)

2026-08-01 00:38:04 +10:00

selectionpolicies.go

reverseproxy: fix broken reservoir sampling in random_choose policy (#7873)

2026-07-12 09:25:31 +10:00

streaming_test.go

reverseproxy: make stream copy buffer size configurable (#7627)

2026-04-10 14:49:32 -06:00

streaming.go

reverseproxy: make stream copy buffer size configurable (#7627)

2026-04-10 14:49:32 -06:00

upstreams_bench_test.go

reverseproxy: preallocate upstream slices with known sizes (#7926)

2026-08-10 15:51:50 +10:00

upstreams_test.go

chore: upgrade .golangci.yml and workflow to v2 (#6924)

2025-06-03 02:24:32 +03:00

upstreams.go

reverseproxy: preallocate upstream slices with known sizes (#7926)

2026-08-10 15:51:50 +10:00