golang.net

mirror of https://github.com/golang/net.git synced 2026-03-31 18:37:08 +09:00

Files

Damien Neil 76f9bf3279 [internal-branch.go1.24-vendor] proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts

When matching against a host "example.com",
don't match an IPv6 address like "[1000::1%25.example.com]:80".

Thanks to Juho Forsén of Mattermost for reporting this issue.

Fixes CVE-2025-22870
For #71984
For #71986

Change-Id: I0c4fdf18765decc27e6ddf220ebe3a9bf4a6454d
Reviewed-on: https://go-review.googlesource.com/c/net/+/654696
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Auto-Submit: Junyang Shao <shaojunyang@google.com>
Reviewed-by: Michael Pratt <mpratt@google.com>

2025-03-04 10:54:19 -08:00

dial_test.go

proxy: fix TestDial failures on wasm/js

2019-06-28 18:53:45 +00:00

dial.go

proxy: add Dial (with context)

2019-05-02 18:39:28 +00:00

direct.go

proxy: add ProxyFromEnvironmentUsing

2019-05-03 19:29:46 +00:00

per_host_test.go

[internal-branch.go1.24-vendor] proxy, http/httpproxy: do not mismatch IPv6 zone ids against hosts