mirror/rclone
1
0 Fork 0
mirror of https://github.com/rclone/rclone.git synced 2026-10-05 12:32:29 -04:00
Code Issues Packages Projects Releases Wiki Activity
10,095 Commits 213 Branches 141 Tags
d0f00a22d5a49a24c8a730a37487e8768b355a77
Commit Graph
3 Commits
Author SHA1 Message Date
Nick Craig-Wood 21d8cd3b92 lib/proxy: fix unbounded HTTP CONNECT headers causing OOM GHSA-xhf4-832v-7xcr CVE-PENDING 
Before this change rclone read a proxy response with http.ReadResponse
over an unrestricted buffered reader. A malicious or compromised
configured proxy, or an active on-path actor controlling a plaintext
HTTP-proxy hop, can grow memory until the process fails.

This fixes the problem by restrincting the read to 1MB maximum.
 2026-07-31 13:21:59 +01:00
Nicolas Dessart a64a8aad0e sftp,ftp: add http proxy authentication support 
This change supports the `http://user:pass@host:port` syntax for the
http_proxy setting.
 2026-01-08 16:31:11 +00:00
Nick Craig-Wood 2404831725 sftp: add --sftp-http-proxy to connect via HTTP CONNECT proxy 2025-04-29 14:16:17 +01:00