WARNING: THIS SITE IS A MIRROR OF GITHUB.COM / IT CANNOT LOGIN OR REGISTER ACCOUNTS / THE CONTENTS ARE PROVIDED AS-IS / THIS SITE ASSUMES NO RESPONSIBILITY FOR ANY DISPLAYED CONTENT OR LINKS / IF YOU FOUND SOMETHING MAY NOT GOOD FOR EVERYONE, CONTACT ADMIN AT ilovescratch@foxmail.com
Skip to content

v1.1.5

Choose a tag to compare

View all tags
@dropwhile dropwhile released this 26 Jul 17:51
· 526 commits to master since this release
v1.1.5
9b59427
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.
  • Security fixes / SSRF
    • Fix: Ensure non-GET/HEAD request does not send outbound request (#35)
    • Fix: Validate redirect urls the same as initial urls (#35)
  • Split out exception for missing content types (#32)
  • Prometheus compatible metrics endpoint added (#34)
  • Disabled credential/userinfo (user:pass@ style) type urls by default.
    Added cli flag (--allow-credential-urls) to retain prior behavior (which
    allows them).
Assets 7
Loading