Joey Hess cc08135e65 prevent using local http proxies per annex.security.allowed-http-addresses ... A local http proxy would bypass the security configuration. So, the security configuration has to be applied when choosing whether to use the proxy. While http rebinding attacks against the dns lookup of the proxy IP address seem very unlikely, this implementation does prevent them, since it resolves the IP address once, checks it, and then reconfigures http-client's proxy using the resolved address. This commit was sponsored by Ole-Morten Duesund on Patreon.		2018-06-18 13:32:20 -04:00
..
Branch
Content	Improve startup time for commands that do not operate on remotes	2018-01-09 16:22:07 -04:00
LockPool	enable LambdaCase and convert around 10% of places that could use it	2017-11-15 16:59:32 -04:00
MetaData	fix thinko for the second time	2018-04-09 13:10:44 -04:00
View
Action.hs	finally really add back custom-setup stanza	2017-12-31 16:36:39 -04:00
AdjustedBranch.hs	rename BlobType and add submodule to it	2018-05-14 14:45:41 -04:00
AutoMerge.hs	rename BlobType and add submodule to it	2018-05-14 14:45:41 -04:00
BloomFilter.hs
Branch.hs	rename BlobType and add submodule to it	2018-05-14 14:45:41 -04:00
BranchState.hs
CatFile.hs
ChangedRefs.hs	enable LambdaCase and convert around 10% of places that could use it	2017-11-15 16:59:32 -04:00
CheckAttr.hs
CheckIgnore.hs
Common.hs	finally really add back custom-setup stanza	2017-12-31 16:36:39 -04:00
Concurrent.hs	fix process and FD leak	2017-09-29 22:36:08 -04:00
Content.hs	limit url downloads to whitelisted schemes	2018-06-16 11:57:50 -04:00
Difference.hs
Direct.hs	enable LambdaCase and convert around 10% of places that could use it	2017-11-15 16:59:32 -04:00
DirHashes.hs
Drop.hs
Environment.hs	finally really add back custom-setup stanza	2017-12-31 16:36:39 -04:00
Export.hs	Fix exporting of non-annexed files to external special remotes.	2017-10-30 12:47:13 -04:00
FileMatcher.hs	enable LambdaCase and convert around 10% of places that could use it	2017-11-15 16:59:32 -04:00
Fixup.hs	Improve startup time for commands that do not operate on remotes	2018-01-09 16:22:07 -04:00
GitOverlay.hs
HashObject.hs
Hook.hs
Ingest.hs	enable LambdaCase and convert around 10% of places that could use it	2017-11-15 16:59:32 -04:00
Init.hs	.noannex file	2017-12-13 14:34:32 -04:00
InodeSentinal.hs
Journal.hs	back out incorrect IO interleaving change	2018-05-08 13:54:42 -04:00
Link.hs	rename BlobType and add submodule to it	2018-05-14 14:45:41 -04:00
Locations.hs	youtube-dl working	2017-11-29 16:40:32 -04:00
LockFile.hs
LockPool.hs
MakeRepo.hs	finally really add back custom-setup stanza	2017-12-31 16:36:39 -04:00
MetaData.hs	don't copy old date metadata when adding new version of a file	2018-04-04 13:58:16 -04:00
Multicast.hs
Notification.hs	reorg	2017-12-14 11:26:59 -04:00
NumCopies.hs	move: --safe/--unsafe and potential drop race fix	2018-04-09 16:20:10 -04:00
Path.hs	remove ifdef for older base than git-annex.cabal allows	2017-12-14 13:45:50 -04:00
Perms.hs	avoid compiler warning	2018-03-15 13:21:32 -04:00
Queue.hs
ReplaceFile.hs	finally really add back custom-setup stanza	2017-12-31 16:36:39 -04:00
SpecialRemote.hs	finish fixing inverted Ord for TrustLevel	2018-04-13 15:17:54 -04:00
Ssh.hs	remove no longer needed uuid check in prepSocket	2018-06-05 12:51:17 -04:00
TaggedPush.hs	sync: Added --cleanup, which removes local and remote synced/ branches.	2017-09-28 14:58:48 -04:00
Transfer.hs	Display error message when http download fails.	2018-05-08 16:11:45 -04:00
UpdateInstead.hs
Url.hs	prevent using local http proxies per annex.security.allowed-http-addresses	2018-06-18 13:32:20 -04:00
UUID.hs
VariantFile.hs
VectorClock.hs
Version.hs
View.hs	reuse hashes of dotfiles/dirs/submodules when entering view	2018-05-14 15:35:20 -04:00
Wanted.hs
WorkTree.hs	rename BlobType and add submodule to it	2018-05-14 14:45:41 -04:00
YoutubeDl.hs	default to not using youtube-dl, for security	2018-06-17 14:51:02 -04:00