Mirrors/coredns
1
0
Fork 0
mirror of https://github.com/coredns/coredns.git synced 2026-04-05 11:45:33 -04:00
Code Issues Packages Projects Releases Wiki Activity
Files
68a8f461299aa3c13cd9c632335cbc7fec6d9c92
coredns/plugin
History
Yong Tang f67994442a core: Reject oversized GET dns query parameter of DoH (#7926) 
* core: Reject oversized GET dns query parameter of DoH

The DoH POST path limits request size using http.MaxBytesReader(..., 65536), but the GET path passes the dns query value directly to base64ToMsg() with no equivalent bound.

This PR adds length check.

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

* Fix

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>

---------

Signed-off-by: Yong Tang <yong.tang.github@outlook.com>
2026-03-18 09:38:44 +02:00
..
acl
chore: Upgrade to golangci-lint v2 (#7236)
2025-04-04 14:27:39 -04:00
any
test(plugin): add tests for any (#7341)
2025-06-01 16:30:01 -07:00
auto
chore(lint): bump golangci-lint to v2.11.1 (#7905)
2026-03-06 11:50:24 -08:00
autopath
[fix:documentation] Clarify autopath README (#6750)
2024-07-01 11:18:35 -04:00
azure
plugin: fix gosec G115 integer overflow warnings (#7799)
2026-01-01 10:20:29 +02:00
bind
test: skip certain network-specific tests on non-Linux (#7318)
2025-05-23 09:23:14 -07:00
bufsize
plugin: fix gosec G115 integer overflow warnings (#7799)
2026-01-01 10:20:29 +02:00
cache
docs(cache): clarify TTL directive (#7941)
2026-03-17 11:55:11 -07:00
cancel
docs: move Also See to See Also (#4245)
2020-10-28 10:56:35 -07:00
chaos
chore(lint): enable gosec (#7792)
2025-12-29 14:01:27 -08:00
clouddns
chore: bump minimum Go version to 1.25 (#7788)
2026-02-16 05:28:30 -08:00
debug
chore(lint): modernize Go (#7536)
2025-09-10 13:08:27 -07:00
deprecated
For caddy v1 in our org (#4018)
2020-09-24 18:14:41 +02:00
dns64
chore(lint): modernize Go (#7536)
2025-09-10 13:08:27 -07:00
dnssec
refactor(cache): modernize with generics (#7842)
2026-02-03 17:23:53 -08:00
dnstap
chore: bump minimum Go version to 1.25 (#7788)
2026-02-16 05:28:30 -08:00
erratic
chore: bump minimum Go version to 1.25 (#7788)
2026-02-16 05:28:30 -08:00
errors
fix(plugins): add regex length limit (#7802)
2026-01-05 09:48:48 -08:00
etcd
plugin: fix gosec G115 integer overflow warnings (#7799)
2026-01-01 10:20:29 +02:00
file
fix(file): protect Zone.Expired with mutex (#7940)
2026-03-16 14:08:03 -07:00
forward
plugin/forward: add max_age option to enforce an absolute connection lifetime (#7903)
2026-03-09 11:50:03 -07:00
geoip
plugin/geoip: Upgrade to geoip2-golang v2 (#7732)
2025-12-08 20:19:47 +00:00
grpc
chore: bump Go version to 1.26.0 (#7856)
2026-02-16 04:26:18 -08:00
grpc_server
Merge commit from fork
2025-12-17 19:08:59 -08:00
header
lint: enable prealloc (#7493)
2025-09-01 18:05:15 -07:00
health
fix(lint): address G114 gosec findings in ready, pprof, and health plugins (#7798)
2026-01-01 11:25:37 +02:00
hosts
chore: enable early-return and superfluous-else from revive (#7129)
2025-06-05 10:10:58 +03:00
https
Merge commit from fork
2025-12-17 19:08:59 -08:00
https3
Merge commit from fork
2025-12-17 19:08:59 -08:00
import
chore: bump coredns/caddy dependency to latest (#7567)
2025-09-20 16:33:00 -07:00
k8s_external
chore(lint): bump golangci-lint to v2.11.1 (#7905)
2026-03-06 11:50:24 -08:00
kubernetes
chore(lint): bump golangci-lint to v2.11.1 (#7905)
2026-03-06 11:50:24 -08:00
loadbalance
chore: bump Go version to 1.26.0 (#7856)
2026-02-16 04:26:18 -08:00
local
add local plugin (#4262)
2020-11-05 15:02:07 +01:00
log
Add metadata for response Type and Class to Log. (#7806)
2026-01-26 08:03:03 -08:00
loop
plugin/loop: use crypto/rand for query name generation (#7881)
2026-02-25 02:21:04 -08:00
metadata
chore: bump Go version to 1.26.0 (#7856)
2026-02-16 04:26:18 -08:00
metrics
Add optional TLS support to /metrics endpoint (#7255)
2026-03-12 13:49:00 -07:00
minimal
plugin/minimal: fix import path (#4523)
2021-03-16 10:55:21 +01:00
multisocket
Update multisocket README.md (#7621)
2025-10-17 19:16:29 +03:00
nomad
plugin: fix gosec G115 integer overflow warnings (#7799)
2026-01-01 10:20:29 +02:00
nsid
fix: remove unnecessary conversion (#6258)
2023-08-14 15:14:09 +02:00
pkg
core: Reject oversized GET dns query parameter of DoH (#7926)
2026-03-18 09:38:44 +02:00
pprof
fix(lint): address G114 gosec findings in ready, pprof, and health plugins (#7798)
2026-01-01 11:25:37 +02:00
proxyproto
feat(proxyproto): add proxy protocol support (#7738)
2026-02-10 17:14:05 -08:00
quic
test: add t.Helper() calls to test helper functions (#7351)
2025-06-04 14:36:04 -07:00
ready
fix(lint): address G114 gosec findings in ready, pprof, and health plugins (#7798)
2026-01-01 11:25:37 +02:00
reload
plugin/reload: Allow disabling jitter with 0s (#7896)
2026-03-05 18:35:41 -08:00
rewrite
chore(lint): bump golangci-lint to v2.11.1 (#7905)
2026-03-06 11:50:24 -08:00
root
chore: enable early-return and superfluous-else from revive (#7129)
2025-06-05 10:10:58 +03:00
route53
refactor: use reflect.TypeFor (#7696)
2025-11-19 09:40:18 -08:00
secondary
feat(secondary): Send NOTIFY messages after zone transfer (#7901)
2026-03-07 21:15:44 -08:00
sign
plugin: fix gosec G115 integer overflow warnings (#7799)
2026-01-01 10:20:29 +02:00
template
fix(plugins): add regex length limit (#7802)
2026-01-05 09:48:48 -08:00
test
refactor(test): replace deprecated pbutil dep (#7924)
2026-03-15 21:35:59 +02:00
timeouts
timeouts plugin documentation include DNS over QUIC (DoQ) (#7166)
2025-03-24 10:37:28 -04:00
tls
fix broken link in webpage (#6488)
2024-03-07 14:24:38 -05:00
trace
fix(plugin): prevent panic when ListenHosts is empty (#7565)
2025-09-19 03:59:37 -07:00
transfer
Fix case-sensitive zone handling in the transfer plugin for AXFR/IXFR. (#7899)
2026-03-15 14:27:03 -07:00
tsig
plugin: fix gosec G115 integer overflow warnings (#7799)
2026-01-01 10:20:29 +02:00
view
fix: update broken link to expr language definition (#7604)
2025-10-10 18:24:14 -07:00
whoami
fix: remove unnecessary conversion (#6258)
2023-08-14 15:14:09 +02:00
backend_lookup_test.go
lint: add missing prealloc to backend lookup test (#7510)
2025-09-02 00:41:06 -07:00
backend_lookup.go
chore(lint): modernize Go (#7536)
2025-09-10 13:08:27 -07:00
backend.go
Cherry-pick: Implement notifies for transfer plugin (#3972) (#4142)
2020-09-24 20:30:39 +02:00
done.go
go report card fixes (#3182)
2019-08-24 18:14:25 +00:00
log_test.go
Clean up tests logging (#1979)
2018-07-19 16:23:06 +01:00
normalize_test.go
fix(plugin): normalize panics on invalid origins (#7563)
2025-09-18 19:15:40 -07:00
normalize.go
fix(plugin): normalize panics on invalid origins (#7563)
2025-09-18 19:15:40 -07:00
plugin_test.go
perf(metrics): implement plugin chain tracking (#7791)
2025-12-29 14:33:12 -08:00
plugin.go
perf(metrics): implement plugin chain tracking (#7791)
2025-12-29 14:33:12 -08:00
register.go
For caddy v1 in our org (#4018)
2020-09-24 18:14:41 +02:00