Caleb Doxsey
e984d07a55
return errors according to accept header ( #5551 )
2025-04-01 08:36:00 -06:00
Denis Mishin
ab5f3ac7f3
core/envoyconfig: make adding ipv6 addresses to internal cidr list conditional on ipv6 support on the system ( #5538 )
2025-03-21 11:14:50 -04:00
Kenneth Jenkins
efe3cef2e4
config: escape % signs in local reply format string ( #5460 )
...
Since v0.26, Pomerium configures Envoy to use a custom HTML error page
format string for most errors served by Envoy itself. This format string
uses %COMMAND% directives to include details about the error.
The HTML error page template also includes any branding options set via
the corresponding Enterprise settings. We need to ensure that any %
signs in the branding options strings are escaped to %% so that Envoy
will not interpret them as the start of a %COMMAND% directive, which
could lead to Envoy rejecting the format string as invalid.
2025-02-03 14:31:06 -08:00
Joe Kralicky
dfd2457bb6
envoy: add internal_address_config to address deprecation warning ( #5425 )
2025-01-14 16:51:04 -05:00
Caleb Doxsey
568e99fdd4
core/envoy: exclude unauthorized access from local replies ( #5108 )
...
* core/envoy: exclude unauthorized access from local replies
* fix test
2024-05-09 11:09:38 -06:00
Caleb Doxsey
5373e25ac4
core/config: add support for stripping the port for matching routes ( #5085 )
...
* core/config: add support for stripping the port for matching routes
* fix test
* rename option, improve port detection
* add more test cases
2024-04-26 08:24:46 -06:00
Caleb Doxsey
494dc4accc
core/envoy: format envoy local replies ( #5067 )
2024-04-18 09:22:15 -06:00
Caleb Doxsey
a741cce50e
config: simplify default set response headers ( #4196 )
2023-05-30 17:44:06 -06:00
Caleb Doxsey
681cf6fa27
config: fix set_response_headers ( #4026 )
...
* config: fix set_response_headers
* fix disabling to support route headers when global headers are disabled
2023-04-20 17:07:23 -06:00
Caleb Doxsey
67e12101fa
envoyconfig: clean up filter chain construction ( #3844 )
...
* cleanup filter chain construction
* rename domains to server names
* rename to hosts
* fix tests
* update function name
* improved domaain matching
2022-12-27 10:07:26 -07:00
Caleb Doxsey
2c9087f5e7
config: disable Strict-Transport-Security when using a self-signed certificate ( #3743 )
2022-11-10 16:01:06 -07:00
Caleb Doxsey
a1061c5c03
envoy: add global response headers to local replies ( #2217 )
2021-05-20 08:56:43 -06:00
