Scott Miller f4db2dddf4

Avoid disclosing IP addresses in unauthenticated requests (#10579) ...

* removing extra information from the returned error, to avoid leaking it to unauthenticated requests

* removing extra information from the returned error, to avoid leaking it to unauthenticated requests

* Change the error message in a way that is retains the HTTP status code

Co-authored-by: bruj0 <ramakandra@gmail.com>

2020-12-22 10:30:03 -06:00

..

auth_token_test.go

The big one (#5346)

2018-09-17 23:03:00 -04:00

cors.go

Create sdk/ and api/ submodules (#6583)

2019-04-12 17:54:35 -04:00

forwarded_for_test.go

Revert "Migrate internalshared out (#9727)" (#10141)

2020-10-13 16:38:21 -07:00

forwarding_bench_test.go

Switch to go modules (#6585)

2019-04-13 03:44:06 -04:00

forwarding_test.go

sys/config: config state endpoint (#7424)

2019-10-08 10:57:15 -07:00

handler_test.go

Return logical.StatusBadRequest on requests with missing token (#8457)

2020-10-26 16:17:25 -04:00

handler.go

Revert "Migrate internalshared out (#9727)" (#10141)

2020-10-13 16:38:21 -07:00

help_test.go

Remove cookie authentication.

2015-08-21 19:46:23 -07:00

help.go

Create sdk/ and api/ submodules (#6583)

2019-04-12 17:54:35 -04:00

http_test.go

audit: log invalid wrapping token request/response (#6541)

2019-07-05 14:15:14 -07:00

logical_test.go

Merge PR #9390: http: revert resource quota changes

2020-07-07 00:05:28 -04:00

logical.go

Avoid disclosing IP addresses in unauthenticated requests (#10579)

2020-12-22 10:30:03 -06:00

plugin_test.go

Update to api 1.0.1 and sdk 0.1.8

2019-04-15 14:10:07 -04:00

stub_assets.go

OSS: Adding UI handlers and configurable headers (#390)

2018-04-03 09:34:01 -05:00

sys_audit_test.go

Re-add injecting into top routes (#5244)

2018-09-05 11:45:17 -04:00

sys_auth_test.go

Add missed description field for GET /sys/auth/:path/tune endpoint (#8193)

2020-02-15 10:32:47 -08:00

sys_config_cors_test.go

Re-add injecting into top routes (#5244)

2018-09-05 11:45:17 -04:00

sys_config_state_test.go

adding new config flag disable_sentinel_trace (#9696)

2020-08-10 06:23:44 -04:00

sys_generate_root_test.go

Audit generate root requests and responses. (#8301)

2020-02-06 11:56:37 -05:00

sys_generate_root.go

Support processing parameters sent as a URL-encoded form (#8325)

2020-02-12 14:20:22 -08:00

sys_health_test.go

Create sdk/ and api/ submodules (#6583)

2019-04-12 17:54:35 -04:00

sys_health.go

Fix build

2020-10-26 18:14:01 -04:00

sys_hostinfo_test.go

sys: add host-info endpoint (#7330)

2019-10-03 09:43:52 -07:00

sys_init_test.go

Tackle #4929 a different way (#4932)

2018-07-24 13:57:25 -07:00

sys_init.go

Support processing parameters sent as a URL-encoded form (#8325)

2020-02-12 14:20:22 -08:00

sys_internal_test.go

Kv preflight (#4430)

2018-04-23 15:00:02 -07:00

sys_leader_test.go

core: Record the time a node became active (#10489)

2020-12-11 16:50:19 -08:00

sys_leader.go

core: Record the time a node became active (#10489)

2020-12-11 16:50:19 -08:00

sys_lease_test.go

Create sdk/ and api/ submodules (#6583)

2019-04-12 17:54:35 -04:00

sys_metrics_test.go

Revert "Migrate internalshared out (#9727)" (#10141)

2020-10-13 16:38:21 -07:00

sys_metrics.go

Revert "Migrate internalshared out (#9727)" (#10141)

2020-10-13 16:38:21 -07:00

sys_monitor_test.go

Add a new "vault monitor" command (#8477)

2020-05-21 13:07:50 -07:00

sys_mount_test.go

Add missed description field for GET /sys/auth/:path/tune endpoint (#8193)

2020-02-15 10:32:47 -08:00

sys_mounts_test.go

Rename "generic" secret backend to "kv" (#3292)

2017-09-15 09:02:29 -04:00

sys_policy_test.go

Re-add injecting into top routes (#5244)

2018-09-05 11:45:17 -04:00

sys_raft.go

Merge PR #10192: Auto-Join: Configurable Scheme & Port (and add k8s provider)

2020-10-23 16:13:09 -04:00

sys_rekey_test.go

The big one (#5346)

2018-09-17 23:03:00 -04:00

sys_rekey.go

Support processing parameters sent as a URL-encoded form (#8325)

2020-02-12 14:20:22 -08:00

sys_rotate_test.go

Add allowed_response_headers (#6115)

2019-02-05 16:02:15 -05:00

sys_seal_test.go

Create sdk/ and api/ submodules (#6583)

2019-04-12 17:54:35 -04:00

sys_seal.go

Be consistent with how we report init status. (#10498)

2020-12-08 13:55:34 -05:00

sys_wrapping_test.go

Create sdk/ and api/ submodules (#6583)

2019-04-12 17:54:35 -04:00

testing.go

Create configutil and move some common config and setup functions there (#8362)

2020-05-14 09:19:27 -04:00

unwrapping_raw_body_test.go

Create sdk/ and api/ submodules (#6583)

2019-04-12 17:54:35 -04:00

util.go

Update retryablehttp to fix a data race (#9551)

2020-08-31 11:10:52 -04:00