envoyproxy / envoyproxy/envoy

Path normalization controls

Open
#6,589 17 comments 1 reaction 2 assignees Claimed by @chaoqin-li1123 View on GitHub
area/security help wanted priority/high tech debt
Dominant language
C++
Stars
28.9k
Forks
5.6k
Avg merge
1d 22h
Merged PRs (30d)
430

Description

The fix for CVE-2019-9900, provided a coarse grained ability to opt-in/out of path normalization. That is, you could either normalize, in which case both normalization was used for matching and transforming the path to the upstream, or not normalize.

Ideally we provide finer grained controls similar to Nginx, where users can opt to normalize for match independent of transforming the path to the upstream.

CC @PiotrSikora

Action item for CVE-2019-9901

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.