Skip to content

Treat different UNIX destinations like different origins #2069

@szmarczak

Description

@szmarczak

It seems that

  1. unix: -> http: works
  2. unix: -> unix: works
  3. http: -> unix: does not work
  4. unix: -> http: -> unix: does not work

2 can leak sensitive headers if the socket path is not the same. For example http://unix/foo:/ -> http://unix/bar:/.

Originally posted by @lpinca in #2047 (comment)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions