Ben McClelland 9ac52cd5c7 fix: LDAP access key filter injection ...

LDAP-backed IAM lookups built a search filter using the request
access key before signature verification, allowing filter
metacharacters to alter query semantics. This made account
lookup behavior observable and could be abused as a
pre-authentication oracle in affected LDAP deployments.

This change escapes access key values with ldap.EscapeFilter
when constructing LDAP search filters and adds a regression
test that verifies metacharacters are encoded rather than
interpreted as filter operators.

Also add DN escaping along with this fix too.

Reported by GitHub user KrisKennawayDD.

2026-07-03 13:45:15 -07:00

..

access-control_test.go

feat: migrate Fiber to v3.3.0

2026-06-15 14:48:31 +04:00

access-control.go

fix: normalize object keys during bucket policy evaluation

2026-05-27 22:20:39 +04:00

acl.go

fix: honor explicit public bucket policy deny

2026-05-22 00:01:24 +04:00

bucket_cors_test.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00

bucket_cors.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00

bucket_policy_actions_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_actions.go

Add website integration tests and remove NotImplemented stubs

2026-06-10 12:41:51 +04:00

bucket_policy_effect_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_effect.go

fix: Changed bucket policy validation error messages

2024-06-24 13:14:28 -04:00

bucket_policy_principals_test.go

fix: adds full wildcard and any character match for bucket policy actions

2025-08-27 20:44:30 +04:00

bucket_policy_principals.go

feat: implementes GetBucketPolicyStatus s3 action

2025-08-25 21:48:06 +04:00

bucket_policy_resources_test.go

fix: normalize object keys during bucket policy evaluation

2026-05-27 22:20:39 +04:00

bucket_policy_resources.go

fix: normalize object keys during bucket policy evaluation

2026-05-27 22:20:39 +04:00

bucket_policy_version_test.go

feat: adds bucket policy version support

2025-10-13 21:39:04 +04:00

bucket_policy_version.go

feat: adds bucket policy version support

2025-10-13 21:39:04 +04:00

bucket_policy.go

fix: normalize object keys during bucket policy evaluation

2026-05-27 22:20:39 +04:00

iam_cache.go

feat: Added admin api and CLI command for updating gateway users attributes

2024-06-20 08:13:10 -07:00

iam_internal.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam_ipa.go

chore: run go modernize tool

2026-03-10 09:47:37 -07:00

iam_ldap_test.go

fix: LDAP access key filter injection

2026-07-03 13:45:15 -07:00

iam_ldap.go

fix: LDAP access key filter injection

2026-07-03 13:45:15 -07:00

iam_s3_object.go

feat: replace aws-sdk-go-v2 s3 manager with transfermanager

2026-02-11 09:58:15 -08:00

iam_single.go

fix: Changes the GetUserAccount method behavior in single iam mode to return root user account, if the root user access is provided.

2025-03-20 16:23:56 +04:00

iam_vault.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

iam.go

feat: adds projectID prop in IAM user account

2025-11-07 20:33:14 +04:00

object_lock.go

fix: validate object lock default retention upper limits

2026-06-16 22:48:51 +04:00

post_policy_test.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00

post_policy.go

feat: global error refactoring

2026-05-21 23:49:34 +04:00