Pomerium is an identity and context-aware access proxy.
Find a file
Kenneth Jenkins fe57da0698 config: escape % signs in local reply format string (#5460)
Since v0.26, Pomerium configures Envoy to use a custom HTML error page
format string for most errors served by Envoy itself. This format string
uses %COMMAND% directives to include details about the error.

The HTML error page template also includes any branding options set via
the corresponding Enterprise settings. We need to ensure that any %
signs in the branding options strings are escaped to %% so that Envoy
will not interpret them as the start of a %COMMAND% directive, which
could lead to Envoy rejecting the format string as invalid.
2025-02-03 22:31:34 +00:00
.github wasaga/ci version branch 28 (#5451) 2025-01-27 17:18:16 -05:00
.vscode use tlsClientConfig instead of custom dialer (#3830) 2022-12-27 09:55:36 -07:00
authenticate Fix many instances of contexts and loggers not being propagated (#5340) 2024-10-25 14:50:56 -04:00
authorize authorize: log JWT groups filtering (#5432) (#5454) 2025-01-28 14:43:27 -08:00
changelogs add v0.27.0 changelog (#5271) 2024-09-10 10:01:46 -04:00
cmd/pomerium Fix many instances of contexts and loggers not being propagated (#5340) 2024-10-25 14:50:56 -04:00
config config: escape % signs in local reply format string (#5460) 2025-02-03 22:31:34 +00:00
databroker Fix many instances of contexts and loggers not being propagated (#5340) 2024-10-25 14:50:56 -04:00
examples ci: address Dockerfile warnings (#5283) 2024-09-11 16:56:47 -07:00
integration Fix many instances of contexts and loggers not being propagated (#5340) 2024-10-25 14:50:56 -04:00
internal authorize: log JWT groups filtering (#5432) (#5454) 2025-01-28 14:43:27 -08:00
k8s/zero zero: set k8s deployment to follow :latest tag (#5313) 2024-10-03 11:39:55 -07:00
ospkg
pkg backport: authorize: cache warming (#5439) (#5441) 2025-01-22 09:51:17 -07:00
proxy Fix many instances of contexts and loggers not being propagated (#5340) 2024-10-25 14:50:56 -04:00
scripts core/proto: update protoc dependencies (#5218) 2024-08-15 11:12:05 -06:00
ui core/ui: no-cache html, force back (#5264) 2024-09-05 10:39:50 -06:00
.codecov.yml
.dockerignore
.fossa.yml
.gitattributes
.gitignore core/ui: improve frontend build size (#5109) 2024-05-09 07:10:00 -06:00
.golangci.yml New integration test fixtures (#5233) 2024-11-05 14:31:40 -05:00
.pre-commit-config.yaml
.tool-versions Update to Go 1.23 (#5216) 2024-08-14 14:12:01 -04:00
3RD-PARTY
DEBUG.MD
Dockerfile chore(deps): bump the docker group with 3 updates (#5353) 2024-11-01 09:44:56 -07:00
Dockerfile.debug chore(deps): bump the docker group with 3 updates (#5353) 2024-11-01 09:44:56 -07:00
go.mod fix redirect server proxy protocol (#5407) 2024-12-23 07:38:05 -07:00
go.sum fix redirect server proxy protocol (#5407) 2024-12-23 07:38:05 -07:00
LICENSE
Makefile Makefile: unset GOOS for get-envoy target (#5300) 2024-09-20 10:54:07 -07:00
pomerium.go
README.md core/ui: update logo (#5249) 2024-09-05 18:13:06 +02:00
RELEASING.md
SECURITY.md Fix SECURITY.md treated as symlink (#5211) 2024-08-07 17:20:18 -04:00

pomerium logo

Go Report Card GoDoc LICENSE Docker Pulls

Pomerium builds secure, clientless connections to internal web apps and services without a corporate VPN.

Pomerium is:

Its not a VPN alternative its the trusted, foolproof way to protect your business. Want a hosted control plane and management GUI? Give Pomerium Zero a try today!

Docs

For comprehensive docs, and tutorials see our documentation.

Contributing

See Contributing for information on how you can contribute to Pomerium.