GO-2023-1955: Dapr API token authentication bypass in HTTP endpoints in github.com/dapr/dapr

uri

package

v1.11.1-rc.1 Latest Latest Go to latest Published: Jun 19, 2023 License: Apache-2.0 Imports: 2 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Rendered for

This section is empty.

This section is empty.

func NormalizePath(dst, src []byte) []byte

NormalizePath is a function copied from https://github.com/valyala/fasthttp/blob/f0865d4aabbbea51a81d56ab31a3de2dfc5a9b05/uri.go#L575 but with Path segment normalization removed. This is because the Dapr should leave encoded path segments _as is_, and not attempt to normalize them for forwarding them on to apps.

This section is empty.