Arnaud Héritier bb6c474950 fix(record): scrub encrypted config from captures ...

Require Docker Desktop authentication only for HTTPS docker.com gateways while retaining loopback trust for forwarded encrypted configuration. Scrub encrypted config and its digest independently from recording captures, and remove both before forwarding to untrusted or direct upstreams.

Fixes #4250

2026-09-12 23:38:56 +02:00

..

authretry_test.go

feat(auth): mint Docker tokens from the stored access token

2026-08-09 16:13:30 +02:00

authretry.go

feat(auth): mint Docker tokens from the stored access token

2026-08-09 16:13:30 +02:00

client_test.go

fix(record): scrub encrypted config from captures

2026-09-12 23:38:56 +02:00

client.go

fix(record): scrub encrypted config from captures

2026-09-12 23:38:56 +02:00

desktop_transport_test.go

fix(http): bound the SSRF pre-check DNS lookup in desktopAwareTransport

2026-09-07 11:47:09 +02:00

desktop_transport.go

fix(http): bound the SSRF pre-check DNS lookup in desktopAwareTransport

2026-09-07 11:47:09 +02:00

safeclient_test.go

fix: complete Desktop PAC egress remediation

2026-08-20 15:24:38 +00:00

safeclient.go

docs: clarify Desktop PAC direct egress

2026-08-20 15:24:38 +00:00

session.go

feat(httpclient): forward agent session ID on gateway-bound requests

2026-05-05 08:37:15 +03:00

sse_filter_test.go

fix(#3996): drop gateway SSE keepalive frames before the genai parser

2026-09-09 15:32:07 +02:00

sse_filter.go

fix(#3996): drop gateway SSE keepalive frames before the genai parser

2026-09-09 15:32:07 +02:00

ssrf_test.go

fix: cover Windows platform behavior

2026-07-30 14:38:00 +02:00

ssrf.go

fix: complete Desktop PAC egress remediation

2026-08-20 15:24:38 +00:00