Skip to content

GitLab

Switch branch/tag
  1. 08 Apr, 2016 1 commit
  3. 07 Apr, 2016 1 commit
  5. 04 Apr, 2016 1 commit
    • Lars Gierth's avatar
      gateway: enforce allowlist for path prefixes · 09937f84
      Lars Gierth authored 
      The gateway accepts an X-Ipfs-Path-Prefix header,
and assumes that it is mounted in a reverse proxy
like nginx, at this path. Links in directory listings,
as well as trailing-slash redirects need to be rewritten
with that prefix in mind.

We don't want a potential attacker to be able to
pass in arbitrary path prefixes, which would end up
in redirects and directory listings, which is why
every prefix has to be explicitly allowed in the config.

Previously, we'd accept *any* X-Ipfs-Path-Prefix header.

Example:

We mount blog.ipfs.io (a dnslink page) at ipfs.io/blog.

nginx_ipfs.conf:

    location /blog/ {
        rewrite "^/blog(/.*)$" $1 break;
        proxy_set_header Host blog.ipfs.io;
        proxy_set_header X-Ipfs-Gateway-Prefix /blog;
        proxy_pass http://127.0.0.1:8080;
    }

.ipfs/config:

    "Gateway": {
        "PathPrefixes": ["/blog"],
        // ...
    },

dnslink:

    > dig TXT _dnslink.blog.ipfs.io
    dnslink=/ipfs/QmWcBjXPAEdhXDATV4ghUpkAonNBbiyFx1VmmHcQe9HEGd

License: MIT
Signed-off-by: default avatarLars Gierth <larsg@systemli.org>
      09937f84
  7. 30 Mar, 2016 1 commit
  9. 09 Mar, 2016 1 commit
  11. 31 Jan, 2016 2 commits
  13. 30 Jan, 2016 2 commits
  15. 12 Jan, 2016 1 commit
  17. 30 Nov, 2015 1 commit
  19. 25 Nov, 2015 2 commits
  21. 11 Nov, 2015 1 commit
  23. 10 Nov, 2015 1 commit
  25. 02 Nov, 2015 1 commit
  27. 22 Apr, 2015 1 commit
  29. 20 Apr, 2015 1 commit
    • Juan Batiz-Benet's avatar
      remove debugerrors · 140cd1fd
      Juan Batiz-Benet authored 
      We now consider debugerrors harmful: we've run into cases where
debugerror.Wrap() hid valuable error information (err == io.EOF?).
I've removed them from the main code, but left them in some tests.
Go errors are lacking, but unfortunately, this isn't the solution.

It is possible that debugerros.New or debugerrors.Errorf should
remain still (i.e. only remove debugerrors.Wrap) but we don't use
these errors often enough to keep.
      140cd1fd
  31. 14 Apr, 2015 1 commit
  33. 31 Mar, 2015 1 commit
  35. 15 Feb, 2015 2 commits
  37. 05 Feb, 2015 1 commit
  39. 04 Feb, 2015 1 commit
  41. 03 Feb, 2015 2 commits
  43. 01 Feb, 2015 1 commit
    • Juan Batiz-Benet's avatar
      bootstrap: use ipfsaddr for boostrap peers ⚠ · 29bf59dd
      Juan Batiz-Benet authored 
      ⚠ this commit makes your current configs unusable, as the
default bootstrap peers. You may need to edit your config.

Go from:

```js
Bootstrap: [
  {
    "Address": "/ip4/104.131.131.82/tcp/4001",
    "PeerID": "QmaCpDMGvV2BGHeYERUEnRQAwe3N8SzbUtfsmvsqQLuvuJ"
  }
]
```

To:
```js
Bootstrap: [
  "/ip4/104.131.131.82/tcp/4001/ipfs/QmaCpDMGvV2BGHeYERUEnRQAwe3N8SzbUtfsmvsqQLuvuJ"
]
```
      29bf59dd
  45. 31 Jan, 2015 2 commits
  47. 29 Jan, 2015 1 commit
  49. 28 Jan, 2015 1 commit