Catherine 434bc884c5 [security] Forbid backslashes from occurring in project names. ...

This addresses an authorization bypass (which could occur only on
Windows).

A more principled way to do this would be to use `os.Root.OpenRoot`
and scope the actual filesystem operations per-domain. However, I
prototyped this and it was complicated enough that it wasn't clear
whether this would not introduce new issues.

V12-Ref: F-77209

2026-05-30 19:10:41 +00:00

..

sys

Fix typo in package name. NFC

2026-05-28 21:49:23 +00:00

analysis.go

[breaking-change] Replace -size-histogram with -analyze-storage.

2026-05-29 08:08:53 +00:00

audit.go

Fix minor resource leak in notifyAudit.

2026-05-30 18:10:43 +00:00

auth.go

[security] Forbid backslashes from occurring in project names.

2026-05-30 19:10:41 +00:00

backend_fs.go

Implement site expiration.

2026-05-29 00:13:44 +02:00

backend_s3.go

Implement site expiration.

2026-05-29 00:13:44 +02:00

backend.go

Implement site expiration.

2026-05-29 00:13:44 +02:00

cache.go

Make installable with go install.

2025-10-22 05:24:55 +00:00

caddy.go

Fix incorrect derivation of endpoint from fallback URL.

2026-05-30 18:10:43 +00:00

collect.go

Address minor file descriptor leak in CollectTar.

2026-05-30 18:13:49 +00:00

config.go

Treat empty PAGES_* environment variables as nonexistent.

2026-05-30 18:10:43 +00:00

existence.go

Fix bits/bytes mixup in bloom filter configuration.

2026-05-30 18:10:43 +00:00

extract.go

Fix opaque panic when ingesting an invalid tar file.

2026-05-30 18:10:43 +00:00

fetch.go

Check git blob size against cumulative limit before reading it.

2026-05-30 18:10:43 +00:00

forge_api.go

Limit how long forge API responses can be.

2026-05-30 18:10:43 +00:00

garbage.go

Simplify TraceGarbage. NFC

2026-05-29 06:17:16 +00:00

gitattributes.go

Warn when a Git repository is uploaded with Git LFS-tracked files.

2026-03-21 02:27:19 +00:00

headers.go

Add a comment on threat model (lack thereof) for Basic-Auth:.

2026-05-30 18:10:43 +00:00

http.go

[breaking-change] Read principal's IP address from X-Forwarded-For.

2025-12-06 00:04:42 +00:00

log.go

Stabilize existence-cache feature.

2026-05-28 23:45:50 +02:00

main.go

[breaking-change] Replace -size-histogram with -analyze-storage.

2026-05-29 08:08:53 +00:00

manifest.go

Implement site expiration.

2026-05-29 00:13:44 +02:00

migrate.go

log.Print→log.Println. NFC

2026-05-28 23:45:50 +02:00

observe.go

Limit cardinality for git_pages_http_request_* metrics.

2026-05-30 18:10:43 +00:00

pages_test.go

Add a relaxed-idna feature to allow some uses of _ in hostnames.

2025-12-12 02:27:22 +00:00

pages.go

Fix goroutine leak in POST webhook handler.

2026-05-30 18:10:43 +00:00

patch.go

Fix opaque panic on invariant violation in ApplyTarPatch.

2026-05-30 18:10:43 +00:00

redirects.go

Warn when a Git repository is uploaded with Git LFS-tracked files.

2026-03-21 02:27:19 +00:00

schema.pb.go

Implement site expiration.

2026-05-29 00:13:44 +02:00

schema.proto

Implement site expiration.

2026-05-29 00:13:44 +02:00

update.go

Allow limiting maximum lifetime of preview sites.

2026-05-28 22:20:49 +00:00

util.go

Fetch manifests from S3 in parallel for histogram and tracing.

2026-04-04 21:10:05 +00:00

wildcard.go

Allow limiting maximum lifetime of preview sites.

2026-05-28 22:20:49 +00:00