oxyno-zeta / s3-proxy

86%

LAST BUILD ON BRANCH master

branch: master

CHANGE BRANCH

x

Reset

• master
• dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.1
• dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.3
• dependabot/go_modules/github.com/go-resty/resty/v2-2.11.0
• dependabot/go_modules/go_modules-b9ac453758
• dependabot/go_modules/golang.org/x/net-0.17.0
• dependabot/go_modules/google.golang.org/protobuf-1.33.0
• develop
• fd/toggle-s3forcepathstyle
• issue-391
• issue-474
• put-request-headers-as-metadata
• release/v2
• renovate/actions-checkout-4.x
• renovate/actions-checkout-6.x
• renovate/actions-setup-go-4.x
• renovate/actions-setup-go-5.x
• renovate/actions-setup-go-6.x
• renovate/docker-setup-qemu-action-2.x
• renovate/docker-setup-qemu-action-3.x
• renovate/docker-setup-qemu-action-4.x
• renovate/dorny-paths-filter-3.x
• renovate/dorny-paths-filter-4.x
• renovate/github.com-coreos-go-oidc-v3-3.x
• renovate/github.com-dimiro1-health-digest
• renovate/github.com-dustin-go-humanize-1.x
• renovate/github.com-fsnotify-fsnotify-1.x
• renovate/github.com-go-chi-chi-v5-5.x
• renovate/github.com-go-chi-cors-1.x
• renovate/github.com-go-playground-validator-v10-10.x
• renovate/github.com-go-resty-resty-v2-2.x
• renovate/github.com-imdario-mergo-1.x
• renovate/github.com-jmattheis-goverter-cmd-goverter-1.x
• renovate/github.com-johannesboyne-gofakes3-0.x
• renovate/github.com-johannesboyne-gofakes3-digest
• renovate/github.com-masterminds-sprig-v3-3.x
• renovate/github.com-prometheus-client_golang-1.x
• renovate/github.com-sirupsen-logrus-1.x
• renovate/github.com-spf13-cobra-1.x
• renovate/github.com-spf13-viper-1.x
• renovate/github.com-stretchr-testify-1.x
• renovate/go-1.x
• renovate/go-github.com-go-chi-chi-v5-vulnerability
• renovate/go-github.com-go-jose-go-jose-v4-vulnerability
• renovate/go-github.com-go-viper-mapstructure-v2-vulnerability
• renovate/go-github.com/go-resty/resty/v2-vulnerability
• renovate/go-golang.org-x-crypto-vulnerability
• renovate/go-golang.org-x-net-vulnerability
• renovate/go-golang.org/x/net-vulnerability
• renovate/go.uber.org-mock-0.x
• renovate/go.uber.org-mock-mockgen-0.x
• renovate/golang.org-x-net-0.x
• renovate/golang.org-x-net-digest
• renovate/golang.org-x-oauth2-0.x
• renovate/golang.org-x-oauth2-digest
• renovate/golang.org-x-sync-0.x
• renovate/golang.org-x-sync-digest
• renovate/golang.org-x-tools-go-analysis-passes-fieldalignment-cmd-fieldalignment-0.x
• renovate/golangci-golangci-lint-1.x
• renovate/golangci-golangci-lint-action-4.x
• renovate/golangci-golangci-lint-action-5.x
• renovate/golangci-golangci-lint-action-6.x
• renovate/golangci-golangci-lint-action-7.x
• renovate/golangci-golangci-lint-action-9.x
• renovate/golangci_golangci_lint
• renovate/gomock-monorepo
• renovate/gopkg.in-yaml.v3-3.x
• renovate/gotest.tools-gotestsum-1.x
• renovate/mikepenz-action-junit-report-4.x
• renovate/mikepenz-action-junit-report-5.x
• renovate/mikepenz-action-junit-report-6.x
• signed-url
• switch-to-aws-v2

Build # 24912267694

Build Type

push

github

Committed by oxyno-zeta

Commit Message

fix: reject dot-segment path traversals before routing and auth

. and .. segments (literal or percent-encoded, including %2F-smuggled
variants) are rejected with 400 before auth runs, preventing path-based
auth bypass.

Coverage Stats

32 of 36 new or added lines in 2 files covered. (88.89%)

5474 of 6360 relevant lines covered (86.07%)

49.64 hits per line