Skip to content

GitLab

Switch branch/tag
  1. 01 Jun, 2016 2 commits
  3. 17 May, 2016 1 commit
  5. 10 May, 2016 1 commit
  7. 29 Apr, 2016 1 commit
  9. 17 Apr, 2016 2 commits
  11. 11 Apr, 2016 2 commits
  13. 08 Apr, 2016 1 commit
  15. 07 Apr, 2016 1 commit
  17. 04 Apr, 2016 1 commit
    • Lars Gierth's avatar
      gateway: enforce allowlist for path prefixes · 09937f84
      Lars Gierth authored 
      The gateway accepts an X-Ipfs-Path-Prefix header,
and assumes that it is mounted in a reverse proxy
like nginx, at this path. Links in directory listings,
as well as trailing-slash redirects need to be rewritten
with that prefix in mind.

We don't want a potential attacker to be able to
pass in arbitrary path prefixes, which would end up
in redirects and directory listings, which is why
every prefix has to be explicitly allowed in the config.

Previously, we'd accept *any* X-Ipfs-Path-Prefix header.

Example:

We mount blog.ipfs.io (a dnslink page) at ipfs.io/blog.

nginx_ipfs.conf:

    location /blog/ {
        rewrite "^/blog(/.*)$" $1 break;
        proxy_set_header Host blog.ipfs.io;
        proxy_set_header X-Ipfs-Gateway-Prefix /blog;
        proxy_pass http://127.0.0.1:8080;
    }

.ipfs/config:

    "Gateway": {
        "PathPrefixes": ["/blog"],
        // ...
    },

dnslink:

    > dig TXT _dnslink.blog.ipfs.io
    dnslink=/ipfs/QmWcBjXPAEdhXDATV4ghUpkAonNBbiyFx1VmmHcQe9HEGd

License: MIT
Signed-off-by: default avatarLars Gierth <larsg@systemli.org>
      09937f84
  19. 30 Mar, 2016 1 commit
  21. 09 Mar, 2016 1 commit
  23. 31 Jan, 2016 2 commits
  25. 30 Jan, 2016 2 commits
  27. 12 Jan, 2016 1 commit
  29. 30 Nov, 2015 1 commit
  31. 25 Nov, 2015 2 commits
  33. 11 Nov, 2015 1 commit
  35. 10 Nov, 2015 1 commit
  37. 02 Nov, 2015 1 commit
  39. 22 Apr, 2015 1 commit
  41. 20 Apr, 2015 1 commit
    • Juan Batiz-Benet's avatar
      remove debugerrors · 140cd1fd
      Juan Batiz-Benet authored 
      We now consider debugerrors harmful: we've run into cases where
debugerror.Wrap() hid valuable error information (err == io.EOF?).
I've removed them from the main code, but left them in some tests.
Go errors are lacking, but unfortunately, this isn't the solution.

It is possible that debugerros.New or debugerrors.Errorf should
remain still (i.e. only remove debugerrors.Wrap) but we don't use
these errors often enough to keep.
      140cd1fd
  43. 14 Apr, 2015 1 commit
  45. 31 Mar, 2015 1 commit
  47. 15 Feb, 2015 2 commits
  49. 05 Feb, 2015 1 commit
  51. 04 Feb, 2015 1 commit
  53. 03 Feb, 2015 2 commits
  55. 01 Feb, 2015 1 commit
    • Juan Batiz-Benet's avatar
      bootstrap: use ipfsaddr for boostrap peers ⚠ · 29bf59dd
      Juan Batiz-Benet authored 
      ⚠ this commit makes your current configs unusable, as the
default bootstrap peers. You may need to edit your config.

Go from:

```js
Bootstrap: [
  {
    "Address": "/ip4/104.131.131.82/tcp/4001",
    "PeerID": "QmaCpDMGvV2BGHeYERUEnRQAwe3N8SzbUtfsmvsqQLuvuJ"
  }
]
```

To:
```js
Bootstrap: [
  "/ip4/104.131.131.82/tcp/4001/ipfs/QmaCpDMGvV2BGHeYERUEnRQAwe3N8SzbUtfsmvsqQLuvuJ"
]
```
      29bf59dd
  57. 31 Jan, 2015 2 commits
  59. 29 Jan, 2015 1 commit
  61. 28 Jan, 2015 1 commit