Skip to content

Releases: cactus/go-camo

v2.2.0

10 Jan 22:38
Compare
Choose a tag to compare
  • Move ip filtering to Dialer.Control, to further improve SSRF protections.
    Note: Added a few additional debug log messages emitted when ip filtering

v2.1.5

11 Aug 23:33
b6e62e3
Compare
Choose a tag to compare
  • Rebuild release with go-1.15

v2.1.4

19 Feb 01:00
Compare
Choose a tag to compare
  • Rebuild release with go-1.13.8
  • Experimental windows build

v2.1.3

19 Dec 06:07
Compare
Choose a tag to compare
  • Rebuild release with go-1.13.5

v2.1.2

18 Nov 20:16
Compare
Choose a tag to compare
  • Fix for enabling metrics collection in proxy

v2.1.1

12 Nov 20:51
c1a5f28
Compare
Choose a tag to compare
  • Security fixes / content-type validation
  • Add ProxyFromEnvironment support. This uses HTTP proxies directed by the HTTP_PROXY and NO_PROXY (or http_proxy and no_proxy) environment variables. See ProxyFromEnvironment for more info.

v2.1.0

03 Oct 03:29
Compare
Choose a tag to compare

Important note regarding Response Size Limiting

The default value for --max-size was previous set to 5120 (5KB). However, chunked encoding responses bypassed size restrictions, and only content-length type responses had response size limits enforced.

This issue has been fixed. To avoid unexpected failures, and to preserve backwards compatibility in this regard, --max-size now defaults to 0 (no size limit).

To restore the previous default, as well as enforcing response size limits on content-type responses, simply pass --max-size=5120 at startup.

Changes

  • Support audio/* with --allow-content-audio flag (similar to how video is handled)
  • Additional metrics datapoints when using --metrics
  • Support only go 1.13, due to use of new error wrapping semantics
  • Improve client connection early abort handling
  • Improve max response side handling -- only read MaxSize KB from any upstream server. Note: This may result in partial responses to clients for chunked encoding requests that are longer than MaxSize, as there is no way to signal the client other than closing the connection.
  • Change default of --max-size to 0, as previously chunked encoding responses bypassed size restrictions (only content-length was previously enforced). To avoid unexpected failures (preserve backwards compatibility in this regard), set max-size to 0 by default moving forward. Previous default was 5mb (use --max-size=5120 to set to previous default).

v2.0.1

13 Sep 03:33
Compare
Choose a tag to compare
  • Slightly optimize some structure layouts to reduce memory overhead.
  • Switch htrie node map from uint8 to uint32, due to go map optimizations.
    See commit bbf7b9f for more info.
  • Update man page generation (makefile) to use asciidoctor. Not only is this easier to maintain, but it has the nice property of being rendered on github.

v2.0.0

08 Sep 21:05
Compare
Choose a tag to compare
  • Remove --allow-list flag, and replace with a unified filtering flag filter-ruleset. See FILTER_FORMAT.md for more information on the accepted syntax.
  • Update man pages.
  • Refactor some internals (remove some regex in favor of a trie like data structure for some comparisons)

v2.0.0-alpha.2

05 Sep 10:56
Compare
Choose a tag to compare
v2.0.0-alpha.2 Pre-release
Pre-release

Performance and memory usage tweaks.