pulse-triage[bot] 971d403d01 Keep infrastructure credentials inside their configured HTTP origin ...

Refuse redirect scheme, host, port and userinfo changes before any redirected request. Preserve same-origin proxy paths, canonical default ports and IPv6 literals, zone identity, the ten-redirect budget and existing CA/pin/explicit-opt-out policy. PVE and PBS password/token/ticket controls reproduce the previous exposure on actual synthetic sockets.

Change-source: pulse-maintainer

2026-10-11 06:37:38 +01:00

..

certificate_test.go

feat(monitoring): alert on certificate validity

2026-08-06 09:47:03 +01:00

certificate.go

feat(monitoring): alert on certificate validity

2026-08-06 09:47:03 +01:00

client_redirect_test.go

Expose infrastructure credentials following redirects to another origin

2026-10-11 06:34:28 +01:00

dnscache_test.go

Enhance devcontainer and CI workflows

2026-01-01 22:29:15 +00:00

dnscache.go

Route discovery policy DNS through the cached resolver (#1638)

2026-07-28 12:08:10 +01:00

extra_test.go

feat: Pulse v6 release

2026-03-18 16:06:30 +00:00

fingerprint_endpoint_test.go

Capture certificates from the actual connection authority

2026-10-11 06:09:15 +01:00

fingerprint.go

Keep infrastructure credentials inside their configured HTTP origin

2026-10-11 06:37:38 +01:00

subprocess_conn.go

fix(tlsutil): discard the subprocess kill error explicitly

2026-07-17 17:26:55 +01:00

tlsutil_test.go

Keep infrastructure credentials inside their configured HTTP origin

2026-10-11 06:37:38 +01:00