mirror of
https://github.com/vee1e/subidx.git
synced 2026-09-01 09:50:18 +00:00
lakshit verma
0da168062c
Endpoints come from externally fetched log lists and were used as-is: any scheme was accepted and the default HTTP client followed up to 10 redirects, so a compromised list source could aim the tailer at internal hosts (e.g. cloud metadata) even though STH signatures would fail. Now NewClient requires https except for loopback (local test servers), both clients refuse redirects outright, and a redirect response surfaces as a normal HTTP error. Tests cover scheme rejection and redirect refusal. |
||
|---|---|---|
| .. | ||
| apex | ||
| loglist | ||
| rfc6962 | ||
| server | ||
| store | ||
| tailer | ||