nginx: reject requests with unexpected Host header#809

Merged

matthew-white merged 39 commits intogetodk:nextfrom alxndrsn:enforce-host-check-https-bronto-approach

Dec 10, 2024

+180-13

Commits on Oct 9, 2024

nginx: reject HTTPS requests with unexpected Host header
alxndrsn
committed
fix test URL
alxndrsn
committed
Add check/config for HTTP
alxndrsn
committed
circle-ci: try changing DOMAIN to localhost
alxndrsn
committed
circle-ci: revert DOMAIN; force-set Host header
alxndrsn
committed

Commits on Oct 15, 2024

Merge branch 'next' into enforce-host-check-https
alxndrsn
committed
capitalise host header
alxndrsn
committed

Commits on Dec 2, 2024

Merge branch 'next' into enforce-host-check-https
alxndrsn
committed
revert code changes
alxndrsn
committed
wip
alxndrsn
committed
revert nginx dockerfile
alxndrsn
committed
expand comment
alxndrsn
committed
421
alxndrsn
committed
untee
alxndrsn
committed
42102
alxndrsn
committed
421
alxndrsn
committed
re-order more like next
alxndrsn
committed
revert circle config change
alxndrsn
committed
Revert "revert circle config change"
alxndrsn
committed
remove time limit for generated key
alxndrsn
committed
revert
alxndrsn
committed
remove logging
alxndrsn
committed
remove catch-all server names
alxndrsn
committed

Commits on Dec 3, 2024

Revert "revert"
alxndrsn
committed
Add test for SSL cert validity period.
alxndrsn
committed
increase ssl cert validity period
alxndrsn
committed
rewrite test with TLS
alxndrsn
committed
little tls
alxndrsn
committed
remove cert from fetch()
alxndrsn
committed
remove stop
alxndrsn
committed
revert magix perl
alxndrsn
committed
rename CNAME -> CERT_DOMAIN
alxndrsn
committed
reorder vars to match getodk#814
alxndrsn
committed

Commits on Dec 8, 2024

Merge branch 'next' into enforce-host-check-https-bronto-approach
alxndrsn
committed
update comment more
alxndrsn
committed
rename sfetch() fn to avoid confusion; remove logging
alxndrsn
committed
wip: add failing test: ipv6
alxndrsn
committed
Passing tests
alxndrsn
committed
rename sfetch() as request()
alxndrsn
committed