Ville Vesilehto 530b0a5ff2 Merge commit from fork ...

DoH, DoQ, and DNS-over-gRPC unpack messages without the acceptance
checks used by UDP and TCP. An unauthenticated request with a large
QDCOUNT can therefore force excessive allocations while names are
decoded and exhaust server memory.

Enforce the same request policy across all server transports.

Signed-off-by: Ville Vesilehto <ville@vesilehto.fi>

2026-07-15 17:54:46 -07:00

..

acl

chore: Upgrade to golangci-lint v2 (#7236)

2025-04-04 14:27:39 -04:00

any

fix: reject invalid any and local config (#8133)

2026-05-31 15:41:27 -07:00

auto

fix(auto): keep first matching zone file for duplicate origins (#8216)

2026-07-09 17:43:07 -07:00

autopath

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

azure

fix(azure): apply access mode to every zone in the same block (#8110)

2026-05-20 08:06:37 -07:00

bind

test: skip certain network-specific tests on non-Linux (#7318)

2025-05-23 09:23:14 -07:00

bufsize

plugin: fix gosec G115 integer overflow warnings (#7799)

2026-01-01 10:20:29 +02:00

cache

request/cache: bind responses and entries to QCLASS (#8272)

2026-07-10 15:18:27 -07:00

cancel

docs: move Also See to See Also (#4245)

2020-10-28 10:56:35 -07:00

chaos

fix: reject unknown chaos block options (#8121)

2026-05-24 05:58:11 -07:00

clouddns

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

debug

chore(lint): modernize Go (#7536)

2025-09-10 13:08:27 -07:00

deprecated

For caddy v1 in our org (#4018)

2020-09-24 18:14:41 +02:00

dns64

chore(lint): modernize Go (#7536)

2025-09-10 13:08:27 -07:00

dnssec

plugin/dnssec: sign each RRset with the zone that owns its name, not the query zone (#8138)

2026-06-05 18:36:28 -07:00

dnstap

plugin/dnstap: fix self-deadlock in listener broadcast on client flush error (#8260)

2026-07-09 20:43:35 +03:00

erratic

plugin/erratic: apply default truncate amount of 2 for bare truncate (#8240)

2026-07-08 05:37:33 -07:00

errors

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

etcd

fix(tls): use Go TLS defaults (#8227)

2026-07-04 16:03:02 -07:00

file

plugin/file: Fix panic on zero-valued SOA refresh (#8276)

2026-07-13 17:33:51 -07:00

forward

plugin/forward: Fix issue in DoH health checks used a default TLS instead of the configured CA (#8279)

2026-07-13 17:34:18 -07:00

geoip

plugin/geoip: Upgrade to geoip2-golang v2 (#7732)

2025-12-08 20:19:47 +00:00

grpc

fix(tls): use Go TLS defaults (#8227)

2026-07-04 16:03:02 -07:00

grpc_server

Merge commit from fork

2025-12-17 19:08:59 -08:00

header

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

health

test: poll instead of fixed sleeps across several tests (#8275)

2026-07-10 15:20:57 -07:00

hosts

plugin/hosts: fix data race between lookups and reload (#8253)

2026-07-08 21:44:16 -07:00

https

Merge commit from fork

2025-12-17 19:08:59 -08:00

https3

Merge commit from fork

2025-12-17 19:08:59 -08:00

import

chore: bump coredns/caddy dependency to latest (#7567)

2025-09-20 16:33:00 -07:00

k8s_external

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

kubernetes

plugin/kubernetes: fix AXFR panic when nsAddrs returns multiple records (#8256)

2026-07-09 01:45:30 -07:00

loadbalance

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

local

fix(local): handle names under .localhost. (#8151)

2026-06-24 02:31:31 -07:00

log

plugin/pkg/response: classify nxdomain without soa as denial (#8199)

2026-07-05 22:48:51 -07:00

loop

plugin/loop: use crypto/rand for query name generation (#7881)

2026-02-25 02:21:04 -08:00

metadata

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

metrics

Allow selectively exporting all Go runtime metrics (#7990)

2026-04-08 21:38:19 +03:00

minimal

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

multisocket

Update multisocket README.md (#7621)

2025-10-17 19:16:29 +03:00

nomad

lint(revive): fix context-as-argument violations (#7976)

2026-03-29 17:01:03 -07:00

nsid

fix: remove unnecessary conversion (#6258)

2023-08-14 15:14:09 +02:00

pkg

Merge commit from fork

2026-07-15 17:54:46 -07:00

pprof

lint(revive): fix unreachable-code violation (#7979)

2026-03-29 17:02:39 -07:00

proxyproto

plugin/proxyproto: Apply an explicitly configured default policy evenwhen no allow list is present. (#8278)

2026-07-13 17:34:30 -07:00

quic

test: add t.Helper() calls to test helper functions (#7351)

2025-06-04 14:36:04 -07:00

ready

fix: reject unknown ready plugin properties (#8119)

2026-05-21 22:29:59 +03:00

reload

plugin/reload: Allow disabling jitter with 0s (#7896)

2026-03-05 18:35:41 -08:00

rewrite

fix(rewrite): restore the original question on empty replies (#8212)

2026-06-30 07:05:12 -04:00

root

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

route53

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

secondary

plugin/secondary: reset catalog members on ID change (#8281)

2026-07-14 18:51:12 -07:00

sign

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

template

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

test

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

timeouts

docs(timeouts): document DoQ read timeout (#8263)

2026-07-09 15:01:59 -07:00

tls

fix(tls): use Go TLS defaults (#8227)

2026-07-04 16:03:02 -07:00

trace

fix(trace): correct Zipkin v2 endpoint docs (#8202)

2026-06-27 03:21:26 -07:00

transfer

plugin/transfer: Fix panic in CoreDNS transfer plugin caused by empty DNS record (#8207)

2026-07-09 20:21:45 +03:00

tsig

plugin/tsig: don't echo client's TSIG.Error if verification is successful (#8215)

2026-07-09 15:04:23 -07:00

view

fix(dnsserver): allow view server blocks in any declaration order (#8001)

2026-04-04 20:45:55 +03:00

whoami

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

backend_lookup_test.go

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

backend_lookup.go

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

backend.go

Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)

2020-09-24 20:30:39 +02:00

done.go

go report card fixes (#3182)

2019-08-24 18:14:25 +00:00

log_test.go

Clean up tests logging (#1979)

2018-07-19 16:23:06 +01:00

normalize_test.go

fix(plugin): normalize panics on invalid origins (#7563)

2025-09-18 19:15:40 -07:00

normalize.go

fix(plugin): normalize panics on invalid origins (#7563)

2025-09-18 19:15:40 -07:00

plugin_test.go

lint(revive): fix unused-parameter violations (#7980)

2026-03-29 17:02:20 -07:00

plugin.go

lint(revive): fix context-as-argument violations (#7976)

2026-03-29 17:01:03 -07:00

register.go

For caddy v1 in our org (#4018)

2020-09-24 18:14:41 +02:00