GO-2024-3108: Hoverfly allows an arbitrary file read in the `/api/v2/simulation` endpoint (`GHSL-2023-274`) in github.com/SpectoLabs/hoverfly

action

package

v1.10.2 Latest Latest Go to latest Published: Jul 20, 2024 License: Apache-2.0 Imports: 18 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

This section is empty.

type Action struct {
	Binary    string
	Script    *os.File
	Remote    string
	DelayInMs int
}

func NewLocalAction(binary, scriptContent string, delayInMs int) (*Action, error)

func NewRemoteAction(host string, delayInMs int) (*Action, error)

func (action *Action) DeleteScript() error

func (action *Action) Execute(pair *models.RequestResponsePair, journalIDChannel chan string, journal *journal.Journal) error

func (action *Action) GetActionView(actionName string) v2.ActionView

func (action *Action) GetScript() (string, error)

type PostServeActionDetails struct {
	Actions        map[string]Action
	FallbackAction *Action
	RWMutex        sync.RWMutex
}

func NewPostServeActionDetails() *PostServeActionDetails

func (postServeActionDetails *PostServeActionDetails) DeleteAction(actionName string) error

func (postServeActionDetails *PostServeActionDetails) SetAction(actionName string, newAction *Action) error