Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
adam jones dcb5a6f696 Add 5s timeout to DNS auth lookup to prevent resource exhaustion (#825) ... The DNS auth endpoint was vulnerable to resource exhaustion if an attacker controlled a domain with a slow/non-responding authoritative DNS server. Without a timeout, handler goroutines would block on DNS resolution indefinitely, allowing an attacker to pile up goroutines until OOM. Production is protected by NGINX ingress's default 60s proxy timeout, but this adds defense-in-depth with a tighter 5s bound.		2025-12-10 16:22:27 +00:00
..
common.go	Add support for ECDSA P-384 (#685)	2025-10-24 12:02:33 -06:00
dns.go	Add 5s timeout to DNS auth lookup to prevent resource exhaustion (#825)	2025-12-10 16:22:27 +00:00
dns_test.go	Add support for ECDSA P-384 (#685)	2025-10-24 12:02:33 -06:00
github_at.go	Replace / with - for operation IDs (#660)	2025-10-14 15:26:43 +03:00
github_at_test.go	Deduplicate server JSON structs between publisher and registry (#318)	2025-08-28 14:58:15 +01:00
github_oidc.go	Replace / with - for operation IDs (#660)	2025-10-14 15:26:43 +03:00
github_oidc_test.go	Deduplicate server JSON structs between publisher and registry (#318)	2025-08-28 14:58:15 +01:00
http.go	Replace / with - for operation IDs (#660)	2025-10-14 15:26:43 +03:00
http_test.go	Add support for ECDSA P-384 (#685)	2025-10-24 12:02:33 -06:00
main.go	Introduce v0.1 version of the API (#658)	2025-10-14 11:04:48 +03:00
none.go	Replace / with - for operation IDs (#660)	2025-10-14 15:26:43 +03:00
none_test.go	Changes on the server.json format and the API (#562)	2025-09-29 23:30:35 +03:00
oidc.go	Replace / with - for operation IDs (#660)	2025-10-14 15:26:43 +03:00
oidc_test.go	Remove OIDC authorization flow to fix data race vulnerability (#526)	2025-09-22 13:41:32 +01:00