consul

Commit Graph

Author	SHA1	Message	Date
R.B. Boyer	a69e901660	xds: update golden tests to be deterministic (#18707 )	2023-09-11 11:40:19 -05:00
Michael Zalimeni	b8d2640429	Disable remote proxy patching except AWS Lambda (#17415 ) To avoid unintended tampering with remote downstreams via service config, refactor BasicEnvoyExtender and RuntimeConfig to disallow typical Envoy extensions from being applied to non-local proxies. Continue to allow this behavior for AWS Lambda and the read-only Validate builtin extensions. Addresses CVE-2023-2816.	2023-05-23 11:55:06 +00:00

Author

SHA1

Message

Date

R.B. Boyer

a69e901660

xds: update golden tests to be deterministic (#18707 )

2023-09-11 11:40:19 -05:00

Michael Zalimeni

b8d2640429

Disable remote proxy patching except AWS Lambda (#17415 )

To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.

2023-05-23 11:55:06 +00:00

2 Commits (fd1d97c3349dcfc9ce3d79a39ef9cfd4e4a7f7f3)