3 people 671f160746 Add dynamic config to control allowed Host headers (#6750) ...

## What changed?

Add a dynamic config to restrict which HTTP `Host` header values are
allowed in HTTP API requests.

## Why?

Prevent DNS rebinding attacks.

## How did you test it?

Added a functional test.

---------

Co-authored-by: David Reiss <[email protected]>

2024-11-14 19:12:24 +00:00

..

error_type.go

Add special handling for context.Canceled and context.DeadlineExceeded error types (#6597)

2024-10-04 14:09:30 -07:00

proto_test.go

Adding UpdateActivityOptions, first iteration (#6657)

2024-10-22 13:41:56 -07:00

proto.go

Adding UpdateActivityOptions, first iteration (#6657)

2024-10-22 13:41:56 -07:00

strings_test.go

Fix truncation of Failures (#6113)

2024-06-13 17:12:50 -07:00

strings.go

Fix truncation of Failures (#6113)

2024-06-13 17:12:50 -07:00

util_test.go

make use of ringpop LookN method (#5102)

2023-11-27 15:04:58 -08:00

util.go

Replace golang.org/x/exp with stdlib where possible (#6366)

2024-08-01 19:33:04 +00:00

wildcard_test.go

Add dynamic config to control allowed Host headers (#6750)

2024-11-14 19:12:24 +00:00

wildcard.go

Add dynamic config to control allowed Host headers (#6750)

2024-11-14 19:12:24 +00:00