consul/lua-inbound-doesnt-apply-to-local-upstreams.latest.golden at e1df0f28bd799d1aaa637652bf43d82a1bd36d01 - consul - Status.im Repos

status-im/consul

mirror of https://github.com/status-im/consul.git synced 2025-02-04 18:03:39 +00:00

Michael Zalimeni b8d2640429

Disable remote proxy patching except AWS Lambda (#17415 )

To avoid unintended tampering with remote downstreams via service
config, refactor BasicEnvoyExtender and RuntimeConfig to disallow
typical Envoy extensions from being applied to non-local proxies.

Continue to allow this behavior for AWS Lambda and the read-only
Validate builtin extensions.

Addresses CVE-2023-2816.

2023-05-23 11:55:06 +00:00

5 lines

134 B

Plaintext

Raw Blame History

 {
   "versionInfo":  "00000001",
   "typeUrl":  "type.googleapis.com/envoy.config.route.v3.RouteConfiguration",
   "nonce":  "00000001"
 }