Patrick Devine dfabde4539 x/transfer, server: tighten redirect handling for registry requests (#18512) ...

Redirects for registry and blob transfers now validate the target scheme
and resolved addresses before following, re-check DNS on each redirect,
and do not follow redirects that switch an https session to plain http.
The --insecure option continues to relax address checks for private
registries but not scheme checks.

2026-09-17 14:21:28 -07:00

..

download.go

x/transfer, server: tighten redirect handling for registry requests (#18512)

2026-09-17 14:21:28 -07:00

redirect_test.go

x/transfer, server: tighten redirect handling for registry requests (#18512)

2026-09-17 14:21:28 -07:00

redirect.go

x/transfer, server: tighten redirect handling for registry requests (#18512)

2026-09-17 14:21:28 -07:00

sparse_other.go

mlx: partial cleanup of imagegen layout (#15435)

2026-05-05 14:15:30 -07:00

sparse_windows.go

mlx: partial cleanup of imagegen layout (#15435)

2026-05-05 14:15:30 -07:00

transfer_test.go

x/transfer, server: tighten redirect handling for registry requests (#18512)

2026-09-17 14:21:28 -07:00

transfer.go

x/transfer, server: tighten redirect handling for registry requests (#18512)

2026-09-17 14:21:28 -07:00

upload.go

x/transfer, server: tighten redirect handling for registry requests (#18512)

2026-09-17 14:21:28 -07:00