Affected by GO-2022-0933 and 3 other vulnerabilities

GO-2022-0933: Incorrect handling of H2 GOAWAY + SETTINGS frames in github.com/pomerium/pomerium

GO-2023-1800: Pomerium vulnerable to Incorrect Authorization with specially crafted requests in github.com/pomerium/pomerium

GO-2024-2965: Pomerium exposed OAuth2 access and ID tokens in user info endpoint response in github.com/pomerium/pomerium

GO-2024-3179: Pomerium service account access token may grant unintended access to databroker API in github.com/pomerium/pomerium

logutil

package

v0.14.4 Latest Latest Go to latest Published: May 24, 2021 License: Apache-2.0 Imports: 7 Imported by: 0

Details

Package logutil contains functionality for working with logs.

This section is empty.

This section is empty.

This section is empty.

type Scrubber struct {
	// contains filtered or unexported fields
}

A Scrubber scrubs potentially sensitive strings from protobuf messages.

func NewScrubber(key string) *Scrubber

NewScrubber creates a new Scrubber.

func (s *Scrubber) ScrubProto(msg proto.Message) proto.Message

ScrubProto takes in a protobuf message, clones it and scrubs any non-whitelisted strings.

func (s *Scrubber) Whitelist(typeName string, fieldNames ...string) *Scrubber

Whitelist whitelists fields for a given type. The type name should be the full protobuf typename (ie google.protobuf.Any).