2
0
mirror of https://github.com/status-im/consul.git synced 2025-01-13 23:36:00 +00:00
Michael Zalimeni b8d2640429
Disable remote proxy patching except AWS Lambda ()
To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.
2023-05-23 11:55:06 +00:00
..