Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix vulnerability in Regex #13

Merged
merged 29 commits into from
Apr 20, 2023
Merged

Fix vulnerability in Regex #13

merged 29 commits into from
Apr 20, 2023

Conversation

mlajkim
Copy link
Contributor

@mlajkim mlajkim commented Apr 17, 2023

Description

  1. destructive changes on black_list/white_list/admin_access_list
    • from regex to wildcard
  2. docker image
    • remove upx
    • use non-root user

Type of change

  • Bug fix
  • New feature
  • Refactoring (no functional changes, no api changes)
  • Non-code changes (update documentation, pipeline, etc.)

Flags

  • Breaks backward compatibility
  • Requires a documentation update
  • Has untestable code

Related issue/PR


Checklist

  • Followed the guidelines in the CONTRIBUTING document
  • Added prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip] in the PR title if necessary
  • Tested and linted the code
  • Commented the code
  • Made corresponding changes to the documentation
  • Passed all pipeline checking

Checklist for maintainer

  • Use Squash and merge
  • Double-confirm the merge message has prefix [skip ci]/[ci skip]/[no ci]/[skip actions]/[actions skip]
  • Delete the branch after merge

config/config_test.go Outdated Show resolved Hide resolved
go.mod Outdated Show resolved Hide resolved
config/config.go Show resolved Hide resolved
config/config.go Outdated Show resolved Hide resolved
config/config.go Outdated Show resolved Hide resolved
config/config.go Show resolved Hide resolved
config/config_test.go Outdated Show resolved Hide resolved
service/resolver.go Outdated Show resolved Hide resolved
service/resolver.go Outdated Show resolved Hide resolved
service/resolver_test.go Outdated Show resolved Hide resolved
service/resource_mapper.go Outdated Show resolved Hide resolved
mlajkim and others added 12 commits April 20, 2023 15:47
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
Co-authored-by: Windz <[email protected]>
Signed-off-by: Aaron Jeongwoo Kim <[email protected]>
service/resolver.go Outdated Show resolved Hide resolved
service/resolver.go Outdated Show resolved Hide resolved
@WindzCUHK WindzCUHK merged commit f76ec3d into master Apr 20, 2023
@WindzCUHK WindzCUHK deleted the fix-vulnerability-in-regex branch April 20, 2023 09:09
@WindzCUHK
Copy link
Contributor

created issue for updating doc: #17

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants