open-nomad

Commit Graph

Author	SHA1	Message	Date
Yoan Blanc	7b873b7746	vendor: rs/cors v1.7.0 The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems. CVE-2018-20744 Signed-off-by: Yoan Blanc <yoan@dosimple.ch>	2020-08-23 10:36:38 +02:00
Seth Hoenig	435c0d9fc8	deps: Switch to Go modules for dependency management This PR switches the Nomad repository from using govendor to Go modules for managing dependencies. Aspects of the Nomad workflow remain pretty much the same. The usual Makefile targets should continue to work as they always did. The API submodule simply defers to the parent Nomad version on the repository, keeping the semantics of API versioning that currently exists.	2020-06-02 14:30:36 -05:00

Author

SHA1

Message

Date

Yoan Blanc

7b873b7746

vendor: rs/cors v1.7.0

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts
a wildcard CORS policy into reflecting an arbitrary Origin header
value, which is incompatible with the CORS security design, and
could lead to CORS misconfiguration security problems.

CVE-2018-20744

Signed-off-by: Yoan Blanc <yoan@dosimple.ch>

2020-08-23 10:36:38 +02:00

Seth Hoenig

435c0d9fc8

deps: Switch to Go modules for dependency management

This PR switches the Nomad repository from using govendor to Go modules
for managing dependencies. Aspects of the Nomad workflow remain pretty
much the same. The usual Makefile targets should continue to work as
they always did. The API submodule simply defers to the parent Nomad
version on the repository, keeping the semantics of API versioning that
currently exists.

2020-06-02 14:30:36 -05:00

2 Commits