golang.net

mirror of https://github.com/golang/net.git synced 2026-03-31 02:17:08 +09:00

Files

Damien Neil cde1dda944 proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts

When matching against a host "example.com",
don't match an IPv6 address like "[1000::1%25.example.com]:80".

Thanks to Juho Forsén of Mattermost for reporting this issue.

Fixes CVE-2025-22870
For #71984

Change-Id: I0c4fdf18765decc27e6ddf220ebe3a9bf4a6454d
Reviewed-on: https://go-review.googlesource.com/c/net/+/654697
Auto-Submit: Roland Shoemaker <roland@golang.org>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Commit-Queue: Roland Shoemaker <roland@golang.org>
Reviewed-by: Roland Shoemaker <roland@golang.org>
Reviewed-by: Damien Neil <dneil@google.com>

2025-03-04 11:00:06 -08:00

dial_test.go

proxy: fix TestDial failures on wasm/js

2019-06-28 18:53:45 +00:00

dial.go

proxy: add Dial (with context)

2019-05-02 18:39:28 +00:00

direct.go

proxy: add ProxyFromEnvironmentUsing

2019-05-03 19:29:46 +00:00

per_host_test.go

proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts