open-consul/envoyextensions
Michael Zalimeni 4cae008559
Disable remote proxy patching except AWS Lambda (#17415)
To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.
2023-05-23 11:55:06 +00:00
..
extensioncommon Disable remote proxy patching except AWS Lambda (#17415) 2023-05-23 11:55:06 +00:00
xdscommon Merge pull request #5200 from hashicorp/NET-3758 (#17102) 2023-04-24 18:23:24 +00:00
go.mod APIGW Normalize Status Conditions (#16994) 2023-04-24 16:22:55 -04:00
go.sum APIGW Normalize Status Conditions (#16994) 2023-04-24 16:22:55 -04:00