mirror of https://github.com/golang/net.git synced 2026-03-31 18:37:08 +09:00

Go to file

Damien Neil 76f9bf3279 [internal-branch.go1.24-vendor] proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts

When matching against a host "example.com",
don't match an IPv6 address like "[1000::1%25.example.com]:80".

Thanks to Juho Forsén of Mattermost for reporting this issue.

Fixes CVE-2025-22870
For #71984
For #71986

Change-Id: I0c4fdf18765decc27e6ddf220ebe3a9bf4a6454d
Reviewed-on: https://go-review.googlesource.com/c/net/+/654696
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Junyang Shao <shaojunyang@google.com>
Reviewed-by: Michael Pratt <mpratt@google.com>

2025-03-04 10:54:19 -08:00

bpf

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

context

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

dict

all: fix a few function names on comments

2022-10-12 13:50:44 +00:00

dns/dnsmessage

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

html

html: add Node.{Ancestors,ChildNodes,Descendants}()

2024-10-29 04:13:16 +00:00

http

[internal-branch.go1.24-vendor] proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts

2025-03-04 10:54:19 -08:00

http2

[internal-branch.go1.24-vendor] http2: encode :protocol pseudo-header before regular headers

2025-01-21 12:21:34 -08:00

icmp

all: update go directive to 1.18

2023-10-11 21:58:12 +00:00

idna

all: update go directive to 1.18

2023-10-11 21:58:12 +00:00

internal

internal/socket: execute gofmt

2024-10-11 22:36:55 +00:00

ipv4

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

ipv6

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

lif

all: update go directive to 1.18

2023-10-11 21:58:12 +00:00

nettest

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

netutil

all: correct typos in comments

2023-02-07 17:08:46 +00:00

proxy

[internal-branch.go1.24-vendor] proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts

2025-03-04 10:54:19 -08:00

publicsuffix

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

quic

quic: add LocalAddr and RemoteAddr to quic.Conn

2024-11-06 23:00:02 +00:00

route

Revert "route: change from syscall to x/sys/unix"

2024-12-06 18:01:32 +00:00

trace

all: fix some comments

2023-02-08 14:49:55 +00:00

webdav

all: replace deprecated io/ioutil calls

2024-05-21 19:59:00 +00:00

websocket

websocket: update nhooyr.io/websocket to github.com/coder/websocket

2024-09-25 22:53:10 +00:00

xsrftoken

xsrftoken: create no padding base64 string by RawURLEncoding

2024-07-22 18:18:19 +00:00

.gitattributes

net: add .gitattributes (fixes windows build)

2014-12-23 17:05:08 +11:00

.gitignore

gitignore: remove obsolete reference to .hgignore in comment

2020-03-20 18:12:08 +00:00

codereview.cfg

net: add codereview.cfg

2015-03-18 17:04:12 +00:00

CONTRIBUTING.md

CONTRIBUTING.md: remove note about not accepting Pull Requests

2018-03-14 18:02:42 +00:00

go.mod

go.mod: update golang.org/x dependencies

2024-12-04 21:36:24 +00:00

go.sum

go.mod: update golang.org/x dependencies

2024-12-04 21:36:24 +00:00

LICENSE

LICENSE: update per Google Legal

2024-07-16 16:05:10 +00:00

PATENTS

go.net: add PATENTS file to the subrepo.

2012-04-16 11:24:46 +10:00

README.md

README: don't recommend go get

2024-11-01 18:28:29 +00:00

README.md

Go Networking

This repository holds supplementary Go networking packages.

Report Issues / Send Patches

This repository uses Gerrit for code changes. To learn how to submit changes to this repository, see https://go.dev/doc/contribute.

The git repository is https://go.googlesource.com/net.

The main issue tracker for the net repository is located at https://go.dev/issues. Prefix your issue with "x/net:" in the subject line, so it is easy to find.