frostfs-s3-gw/cmd/s3-gw
Roman Loginov 04b8fc2b5f
All checks were successful
/ Vulncheck (push) Successful in 1m28s
/ Builds (push) Successful in 2m14s
/ Lint (push) Successful in 3m59s
/ Tests (push) Successful in 3m17s
[#562] Empty default value for TLS termination header param
If the service is accessed not through a proxy and the
default value of the parameter with the header key is
not empty, then the system administrator does not
control disabling TLS verification in any way, because
the client can simply add a known header, thereby
skipping the verification. Therefore, the default value
of the header parameter is made empty. If it is empty,
then TLS verification cannot be disabled in any way.
Thus, the system administrator will be able to control
the enabling/disabling of TLS.

Signed-off-by: Roman Loginov <r.loginov@yadro.com>
2024-12-13 11:12:58 +00:00
..
app.go [#562] Add tests for form encryption params 2024-12-11 16:09:43 +03:00
app_metrics.go [TrueCloudLab#26] Add billing metrics to separate registry 2023-02-10 10:55:38 +03:00
app_profiler.go [#591] Sync metrics and pprof configuration 2022-07-29 09:32:08 +03:00
app_settings.go [#562] Empty default value for TLS termination header param 2024-12-13 11:12:58 +00:00
decoder_test.go [#379] Add Iana CharsetReader for Oracle integration 2024-04-25 17:44:38 +03:00
main.go [#502] Add Dropped logs (by sampling) metric 2024-12-03 12:16:56 +00:00
namespaces.go [#266] Support per namespace placement policies configuration 2023-11-28 16:12:42 +03:00
server.go [#341] Add "h2" as next proto to allow HTTP/2 requests in http.Serve 2024-04-03 12:04:48 +00:00
server_test.go [#341] Test HTTP/2 requests 2024-04-03 12:04:48 +00:00
service.go [#288] Fix possibility of panic during SIGHUP 2024-01-09 10:53:54 +03:00
validate_test.go [#446] Add support virtual-hosted-style 2024-08-23 08:35:05 +00:00