Erik Dubbelboer 534461ad12 fasthttpproxy: reject CRLF in HTTP proxy CONNECT target (#2174) ...

Reject dial target addresses containing CR or LF before building the
HTTP CONNECT request in httpProxyDial.

This prevents header injection through HTTP proxies when callers pass
unsanitized target addresses via low-level dial paths such as
HostClient.Addr or direct proxy dialer usage.

Reported by https://github.com/OLU-DEVX

2026-04-05 07:03:35 +02:00

..

dialer_test.go

fasthttpproxy: reject CRLF in HTTP proxy CONNECT target (#2174)

2026-04-05 07:03:35 +02:00

dialer.go

fasthttpproxy: reject CRLF in HTTP proxy CONNECT target (#2174)

2026-04-05 07:03:35 +02:00

doc.go

Update golangci-lint to v2 (#1980)

2025-03-25 06:40:55 +01:00

http.go

feat(fasthttpproxy): add dual-stack connection support to enable IPv6 proxies for HTTP and SOCKS5 dialers (#1885)

2024-10-22 19:19:00 +02:00

proxy_env.go

Add a multifunctional Dialer struct. (#1829)

2024-08-24 12:46:01 +02:00

socks5.go

feat(fasthttpproxy): add dual-stack connection support to enable IPv6 proxies for HTTP and SOCKS5 dialers (#1885)

2024-10-22 19:19:00 +02:00