Dmitry VerkhoturovandUmputun e62b3c830d fix(trusted-proxy): warn on catch-all, cover more cases, trim wording ...

Follow-up to the review notes on #2116:
- warn at startup when --trusted-proxy contains a catch-all (0.0.0.0/0 or ::/0),
  which trusts every peer and re-opens the bypass - mirrors the unset-case warning
- realIPMiddleware tests: cover the unparseable-peer and trusted-peer-without-header
  branches, and make the observed values per-call so subtests don't share closure locals
- trim the flag description and shorten the startup warning to the terse [WARN] style

2026-07-09 15:05:05 -05:00

..

testdata

add apple bad key test, fix key location

2023-01-04 03:54:38 -06:00

web

move static web files from rakyll/statik to go:embed

2022-08-03 15:41:02 -05:00

avatar_test.go

migrate to go-pkgz/auth/v2

2024-12-09 01:54:03 +00:00

avatar.go

migrate to go-pkgz/auth/v2

2024-12-09 01:54:03 +00:00

backup_test.go

add meaningful error for lack of auth on import, remap and backup

2024-01-28 12:16:24 -06:00

backup.go

chore(lint): suppress gosec G70x false positives in admin/CLI paths

2026-04-18 02:32:31 -05:00

cleanup_test.go

Use stdlib http.ServeMux instead of chi in cleanup_test

2026-06-30 17:39:37 -05:00

cleanup.go

chore(lint): suppress gosec G70x false positives in admin/CLI paths

2026-04-18 02:32:31 -05:00

cmd_test.go

Replace "(Not)Nil" test checks for errors with with "(No)Error" (#503)

2019-12-29 15:42:39 -06:00

cmd.go

fix: IPv6 address truncation and image proxy SSRF vulnerabilities

2026-02-28 04:13:07 -06:00

import_test.go

add meaningful error for lack of auth on import, remap and backup

2024-01-28 12:16:24 -06:00

import.go

chore(lint): cap multipart upload size and suppress remaining gosec G70x

2026-04-18 02:32:31 -05:00

remap_test.go

add meaningful error for lack of auth on import, remap and backup

2024-01-28 12:16:24 -06:00

remap.go

chore(lint): cap multipart upload size and suppress remaining gosec G70x

2026-04-18 02:32:31 -05:00

restore_test.go

replace numbers with proper HTTP status codes in tests

2022-04-17 19:42:45 -05:00

restore.go

move common options to cmd.go

2022-07-25 12:42:13 -05:00

server_test.go

fix: add --trusted-proxy to gate client-IP forwarding headers

2026-07-05 17:47:19 -05:00

server.go

fix(trusted-proxy): warn on catch-all, cover more cases, trim wording

2026-07-09 15:05:05 -05:00