github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
20,242 Commits
1,701 Branches
460 Tags
695 MiB
Commit Graph

1 Commits (f7c5ba5f90b9c060cad1f6c80dc4b3eef7fd81d7)

Author SHA1 Message Date
Michael Zalimeni b8d2640429
Disable remote proxy patching except AWS Lambda (#17415) 
To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.
 2023-05-23 11:55:06 +00:00