mirror of
https://github.com/minio/minio.git
synced 2026-02-04 18:00:15 -05:00
fix: information disclosure bug in preconditions GET (#19810)
precondition check was being honored before, validating if anonymous access is allowed on the metadata of an object, leading to metadata disclosure of the following headers. ``` Last-Modified Etag x-amz-version-id Expires: Cache-Control: ``` although the information presented is minimal in nature, and of opaque nature. It still simply discloses that an object by a specific name exists or not without even having enough permissions.
This commit is contained in:
@@ -2,5 +2,6 @@
|
||||
|
||||
export CGO_ENABLED=0
|
||||
for dir in docs/debugging/*/; do
|
||||
go build -C ${dir} -v
|
||||
bin=$(basename ${dir})
|
||||
go build -C ${dir} -o ${PWD}/${bin}
|
||||
done
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
module github.com/minio/minio/docs/debugging/inspect
|
||||
|
||||
go 1.19
|
||||
go 1.21
|
||||
|
||||
require (
|
||||
github.com/klauspost/compress v1.17.4
|
||||
|
||||
@@ -1,3 +1,3 @@
|
||||
module github.com/minio/minio/docs/debugging/pprofgoparser
|
||||
|
||||
go 1.19
|
||||
go 1.21
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
module github.com/minio/minio/docs/debugging/reorder-disks
|
||||
|
||||
go 1.19
|
||||
go 1.21
|
||||
|
||||
require github.com/minio/pkg/v2 v2.0.6
|
||||
require github.com/minio/pkg/v3 v3.0.1
|
||||
|
||||
@@ -1,2 +1,2 @@
|
||||
github.com/minio/pkg/v2 v2.0.6 h1:n+PpbSMaJK1FfQkP55l1y0wj5Hi9R5w2DtGhxiGdP9I=
|
||||
github.com/minio/pkg/v2 v2.0.6/go.mod h1:Z9Z/LzhTIxZ6zhPeW658vmLRilRek3zBOqNB9j+lxSY=
|
||||
github.com/minio/pkg/v3 v3.0.1 h1:qts6g9rYjAdeomRdwjnMc1IaQ6KbaJs3dwqBntXziaw=
|
||||
github.com/minio/pkg/v3 v3.0.1/go.mod h1:53gkSUVHcfYoskOs5YAJ3D99nsd2SKru90rdE9whlXU=
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
module github.com/minio/minio/docs/debugging/xattr
|
||||
|
||||
go 1.19
|
||||
go 1.21
|
||||
|
||||
require (
|
||||
github.com/olekukonko/tablewriter v0.0.5
|
||||
|
||||
Reference in New Issue
Block a user