caddyhttp

Feb 20, 2026 GO-2026-4639 +1 more

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Feb 20, 2026 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Changes in this version

+ var ServerHeader = "Caddy"

type Metrics

+ ObserveCatchallHosts bool

type Server

+ Allow0RTT *bool

+ KeepAliveCount int

+ KeepAliveIdle caddy.Duration

+ PacketConnWrappersRaw []json.RawMessage

+ TrustedProxiesUnix bool

Jan 5, 2026 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Dec 3, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Aug 22, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Aug 22, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Changes in this version

type App

+ func (app *App) Cleanup() error

Apr 18, 2025 GO-2026-4535 +7 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4639: Caddy forward_auth copy_headers allows Identity Injection and Privilege Escalation in github.com/caddyserver/caddy

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 25, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 24, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 8, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Mar 6, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jan 8, 2025 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Dec 30, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Changes in this version

+ const CELPlaceholderFuncName

+ const CELRequestVarName

type App

+ Metrics *Metrics

type AutoHTTPSConfig

+ PreferWildcard bool

+ type CELMatcherWithErrorFactory = func(data ref.Val) (RequestMatcherWithError, error)

type MatchClientIP

+ func (m MatchClientIP) MatchWithError(r *http.Request) (bool, error)

type MatchExpression

+ func (m MatchExpression) MatchWithError(r *http.Request) (bool, error)

type MatchHeader

+ func (m MatchHeader) MatchWithError(r *http.Request) (bool, error)

type MatchHeaderRE

+ func (m MatchHeaderRE) MatchWithError(r *http.Request) (bool, error)

type MatchHost

+ func (m MatchHost) MatchWithError(r *http.Request) (bool, error)

type MatchMethod

+ func (m MatchMethod) MatchWithError(r *http.Request) (bool, error)

type MatchNot

+ func (m MatchNot) MatchWithError(r *http.Request) (bool, error)

type MatchPath

+ func (m MatchPath) MatchWithError(r *http.Request) (bool, error)

type MatchPathRE

+ func (m MatchPathRE) MatchWithError(r *http.Request) (bool, error)

type MatchProtocol

+ func (m MatchProtocol) MatchWithError(r *http.Request) (bool, error)

type MatchQuery

+ func (m MatchQuery) MatchWithError(r *http.Request) (bool, error)

type MatchRemoteIP

+ func (m MatchRemoteIP) MatchWithError(r *http.Request) (bool, error)

+ type MatchTLS struct

+ HandshakeComplete *bool

+ func (MatchTLS) CaddyModule() caddy.ModuleInfo

+ func (m *MatchTLS) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchTLS) Match(r *http.Request) bool

+ func (m MatchTLS) MatchWithError(r *http.Request) (bool, error)

type MatchVarsRE

+ func (MatchVarsRE) CELLibrary(ctx caddy.Context) (cel.Library, error)

+ func (m MatchVarsRE) MatchWithError(r *http.Request) (bool, error)

type MatcherSet

+ func (mset MatcherSet) MatchWithError(r *http.Request) (bool, error)

type MatcherSets

+ func (ms MatcherSets) AnyMatchWithError(req *http.Request) (bool, error)

type Metrics

+ PerHost bool

+ type RequestMatcherWithError interface

+ MatchWithError func(*http.Request) (bool, error)

type Server

+ ListenProtocols [][]string

type VarsMatcher

+ func (VarsMatcher) CELLibrary(_ caddy.Context) (cel.Library, error)

+ func (m VarsMatcher) MatchWithError(r *http.Request) (bool, error)

Nov 5, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Oct 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Oct 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jun 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jun 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Jun 2, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

May 30, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

May 28, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Changes in this version

+ const AccessLoggerNameVarKey

+ const LogSkipVar

+ const MatcherNameCtxKey

type ExtraLogFields

+ func (e *ExtraLogFields) Set(field zap.Field)

type MatchExpression

+ Name string

type Server

+ TrustedProxiesStrict int

+ func (s *Server) RegisterOnStop(f func(context.Context) error)

type ServerLogConfig

+ Trace bool

+ type StringArray []string

+ func (sa *StringArray) UnmarshalJSON(b []byte) error

May 20, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

May 7, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Apr 30, 2024 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Dec 7, 2023 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Oct 11, 2023 GO-2026-4535 +6 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

  GO-2026-4644: Caddy's vars_regexp double-expands user input, leaking env vars and files in github.com/caddyserver/caddy

Changes in this version

type HTTPRedirectListenerWrapper

+ MaxHeaderBytes int64

Aug 17, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Aug 6, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Aug 3, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Aug 3, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Aug 2, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ const ClientIPVarKey

+ const ConnCtxKey

+ const ExtraLogFieldsCtxKey

+ func RegisterNetworkHTTP3(originalNetwork, h3Network string)

+ type ExtraLogFields struct

+ func (e *ExtraLogFields) Add(field zap.Field)

+ type Invoke struct

+ Name string

+ func (Invoke) CaddyModule() caddy.ModuleInfo

+ func (invoke *Invoke) ServeHTTP(w http.ResponseWriter, r *http.Request, next Handler) error

+ type MatchClientIP struct

+ Ranges []string

+ func (MatchClientIP) CELLibrary(ctx caddy.Context) (cel.Library, error)

+ func (MatchClientIP) CaddyModule() caddy.ModuleInfo

+ func (m *MatchClientIP) Provision(ctx caddy.Context) error

+ func (m *MatchClientIP) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchClientIP) Match(r *http.Request) bool

type ResponseWriterWrapper

+ func (rww *ResponseWriterWrapper) Unwrap() http.ResponseWriter

type Route

+ func (r *Route) Provision(ctx caddy.Context, metrics *Metrics) error

+ func (r *Route) ProvisionHandlers(ctx caddy.Context, metrics *Metrics) error

+ func (r *Route) ProvisionMatchers(ctx caddy.Context) error

+ func (r Route) Compile(next Handler) Handler

type Server

+ ClientIPHeaders []string

+ EnableFullDuplex bool

+ NamedRoutes map[string]*Route

+ func (s *Server) Name() string

Jun 21, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

May 16, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Feb 14, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Feb 8, 2023 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ const TrustedProxyVarKey

+ func CIDRExpressionToPrefix(expr string) (netip.Prefix, error)

+ func PrivateRangesCIDR() []string

+ type IPRangeSource interface

+ GetIPRanges func(*http.Request) []netip.Prefix

type Server

+ TrustedProxiesRaw json.RawMessage

+ type StaticIPRange struct

+ Ranges []string

+ func (StaticIPRange) CaddyModule() caddy.ModuleInfo

+ func (m *StaticIPRange) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (s *StaticIPRange) GetIPRanges(_ *http.Request) []netip.Prefix

+ func (s *StaticIPRange) Provision(ctx caddy.Context) error

Oct 13, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 21, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 20, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ const SkipLogVar

+ var CELTypeJSON = cel.MapType(cel.StringType, cel.DynType)

+ func CleanPath(p string, collapseSlashes bool) string

+ func ParseCaddyfileNestedMatcherSet(d *caddyfile.Dispenser) (caddy.ModuleMap, error)

type App

+ ShutdownDelay caddy.Duration

type MatcherSets

+ func (ms MatcherSets) String() string

+ type Metrics struct

type ResponseWriterWrapper

+ func (rww *ResponseWriterWrapper) ReadFrom(r io.Reader) (n int64, err error)

type Route

+ func (r Route) String() string

type Server

+ KeepAliveInterval caddy.Duration

+ Metrics *Metrics

+ Protocols []string

+ func (s *Server) Listeners() []net.Listener

+ func (s *Server) RegisterConnContext(f func(ctx context.Context, c net.Conn) context.Context)

+ func (s *Server) RegisterConnState(f func(net.Conn, http.ConnState))

+ func (s *Server) RegisterOnShutdown(f func())

Sep 17, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 16, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 5, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 5, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 5, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Jul 12, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ var CelTypeJson = decls.NewMapType(decls.String, decls.Dyn)

+ var CelTypeListString = decls.NewListType(decls.String)

+ func CELMatcherDecorator(funcName string, fac CELMatcherFactory) interpreter.InterpretableDecorator

+ func CELMatcherImpl(macroName, funcName string, matcherDataTypes []*exprpb.Type, ...) (cel.Library, error)

+ func CELMatcherRuntimeFunction(funcName string, fac CELMatcherFactory) functions.BinaryOp

+ func CELValueToMapStrList(data ref.Val) (map[string][]string, error)

+ func NewMatcherCELLibrary(envOptions []cel.EnvOption, programOptions []cel.ProgramOption) cel.Library

+ type CELLibraryProducer interface

+ CELLibrary func(caddy.Context) (cel.Library, error)

+ type CELMatcherFactory func(data ref.Val) (RequestMatcher, error)

type MatchHeader

+ func (MatchHeader) CELLibrary(_ caddy.Context) (cel.Library, error)

type MatchHeaderRE

+ func (MatchHeaderRE) CELLibrary(ctx caddy.Context) (cel.Library, error)

type MatchHost

+ func (MatchHost) CELLibrary(ctx caddy.Context) (cel.Library, error)

type MatchMethod

+ func (MatchMethod) CELLibrary(_ caddy.Context) (cel.Library, error)

type MatchPath

+ func (MatchPath) CELLibrary(ctx caddy.Context) (cel.Library, error)

type MatchPathRE

+ func (MatchPathRE) CELLibrary(ctx caddy.Context) (cel.Library, error)

type MatchProtocol

+ func (MatchProtocol) CELLibrary(_ caddy.Context) (cel.Library, error)

type MatchQuery

+ func (MatchQuery) CELLibrary(_ caddy.Context) (cel.Library, error)

type MatchRemoteIP

+ func (MatchRemoteIP) CELLibrary(ctx caddy.Context) (cel.Library, error)

May 6, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Apr 25, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

type AutoHTTPSConfig

+ DisableCerts bool

+ type HTTPRedirectListenerWrapper struct

+ func (HTTPRedirectListenerWrapper) CaddyModule() caddy.ModuleInfo

+ func (h *HTTPRedirectListenerWrapper) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (h *HTTPRedirectListenerWrapper) WrapListener(l net.Listener) net.Listener

type HandlerError

+ func (e HandlerError) Unwrap() error

type LoggableHTTPHeader

+ ShouldLogCredentials bool

type LoggableHTTPRequest

+ ShouldLogCredentials bool

type ServerLogConfig

+ ShouldLogCredentials bool

type VarsMiddleware

+ func (m *VarsMiddleware) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

Apr 13, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Mar 9, 2022 GO-2026-4535 +5 more

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Nov 8, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ const MatcherErrorVarKey

Sep 3, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Aug 30, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Jun 17, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ func SanitizedPathJoin(root, reqPath string) string

Jun 12, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

May 19, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

May 10, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ func ParseNamedResponseMatcher(d *caddyfile.Dispenser, matchers map[string]ResponseMatcher) error

type StaticError

+ func (e *StaticError) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

type StaticResponse

+ Abort bool

May 3, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Apr 1, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Feb 15, 2021 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Dec 30, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

type MatchHost

+ func (m MatchHost) Provision(_ caddy.Context) error

type MatchRemoteIP

+ Forwarded bool

Dec 30, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Dec 10, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Nov 30, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Nov 23, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 13, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 26, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 13, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

type MatchVarsRE

+ func (m *MatchVarsRE) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

type VarsMatcher

+ func (m *VarsMatcher) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

Sep 23, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 18, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 17, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Aug 11, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Jun 30, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Jun 26, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ func PrepareRequest(r *http.Request, repl *caddy.Replacer, w http.ResponseWriter, s *Server) *http.Request

+ type ResponseHandler struct

+ Match *ResponseMatcher

+ Routes RouteList

+ StatusCode WeakString

+ func (rh *ResponseHandler) Provision(ctx caddy.Context) error

type Server

+ AllowH2C bool

Jun 26, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Jun 8, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

May 2, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Changes in this version

+ const DefaultHTTPPort

+ const DefaultHTTPSPort

+ const ErrorCtxKey

+ const OriginalRequestCtxKey

+ const ServerCtxKey

+ const VarsCtxKey

+ var ErrNotImplemented = fmt.Errorf("method not implemented")

+ func GetVar(ctx context.Context, key string) interface

+ func NewTestReplacer(req *http.Request) *caddy.Replacer

+ func SetVar(ctx context.Context, key string, value interface{})

+ func StatusCodeMatches(actual, configured int) bool

+ type App struct

+ GracePeriod caddy.Duration

+ HTTPPort int

+ HTTPSPort int

+ Servers map[string]*Server

+ func (App) CaddyModule() caddy.ModuleInfo

+ func (app *App) Provision(ctx caddy.Context) error

+ func (app *App) Start() error

+ func (app *App) Stop() error

+ func (app *App) Validate() error

+ type AutoHTTPSConfig struct

+ DisableRedir bool

+ Disabled bool

+ IgnoreLoadedCerts bool

+ Skip []string

+ SkipCerts []string

+ func (ahc AutoHTTPSConfig) Skipped(name string, skipSlice []string) bool

+ type HTTPErrorConfig struct

+ Routes RouteList

+ func (*HTTPErrorConfig) WithError(r *http.Request, err error) *http.Request

+ type HTTPInterfaces interface

+ type Handler interface

+ ServeHTTP func(http.ResponseWriter, *http.Request) error

+ type HandlerError struct

+ Err error

+ ID string

+ StatusCode int

+ Trace string

+ func Error(statusCode int, err error) HandlerError

+ func (e HandlerError) Error() string

+ type HandlerFunc func(http.ResponseWriter, *http.Request) error

+ func (f HandlerFunc) ServeHTTP(w http.ResponseWriter, r *http.Request) error

+ type LoggableHTTPHeader http.Header

+ func (h LoggableHTTPHeader) MarshalLogObject(enc zapcore.ObjectEncoder) error

+ type LoggableHTTPRequest struct

+ func (r LoggableHTTPRequest) MarshalLogObject(enc zapcore.ObjectEncoder) error

+ type LoggableStringArray []string

+ func (sa LoggableStringArray) MarshalLogArray(enc zapcore.ArrayEncoder) error

+ type LoggableTLSConnState tls.ConnectionState

+ func (t LoggableTLSConnState) MarshalLogObject(enc zapcore.ObjectEncoder) error

+ type MatchExpression struct

+ Expr string

+ func (MatchExpression) CaddyModule() caddy.ModuleInfo

+ func (m *MatchExpression) Provision(_ caddy.Context) error

+ func (m *MatchExpression) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m *MatchExpression) UnmarshalJSON(data []byte) error

+ func (m MatchExpression) MarshalJSON() ([]byte, error)

+ func (m MatchExpression) Match(r *http.Request) bool

+ type MatchHeader http.Header

+ func (MatchHeader) CaddyModule() caddy.ModuleInfo

+ func (m *MatchHeader) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchHeader) Match(r *http.Request) bool

+ type MatchHeaderRE map[string]*MatchRegexp

+ func (MatchHeaderRE) CaddyModule() caddy.ModuleInfo

+ func (m *MatchHeaderRE) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchHeaderRE) Match(r *http.Request) bool

+ func (m MatchHeaderRE) Provision(ctx caddy.Context) error

+ func (m MatchHeaderRE) Validate() error

+ type MatchHost []string

+ func (MatchHost) CaddyModule() caddy.ModuleInfo

+ func (m *MatchHost) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchHost) Match(r *http.Request) bool

+ type MatchMethod []string

+ func (MatchMethod) CaddyModule() caddy.ModuleInfo

+ func (m *MatchMethod) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchMethod) Match(r *http.Request) bool

+ type MatchNot struct

+ MatcherSets []MatcherSet

+ MatcherSetsRaw []caddy.ModuleMap

+ func (MatchNot) CaddyModule() caddy.ModuleInfo

+ func (m *MatchNot) Provision(ctx caddy.Context) error

+ func (m *MatchNot) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m *MatchNot) UnmarshalJSON(data []byte) error

+ func (m MatchNot) MarshalJSON() ([]byte, error)

+ func (m MatchNot) Match(r *http.Request) bool

+ type MatchPath []string

+ func (MatchPath) CaddyModule() caddy.ModuleInfo

+ func (m *MatchPath) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchPath) Match(r *http.Request) bool

+ func (m MatchPath) Provision(_ caddy.Context) error

+ type MatchPathRE struct

+ func (MatchPathRE) CaddyModule() caddy.ModuleInfo

+ func (m MatchPathRE) Match(r *http.Request) bool

+ type MatchProtocol string

+ func (MatchProtocol) CaddyModule() caddy.ModuleInfo

+ func (m *MatchProtocol) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchProtocol) Match(r *http.Request) bool

+ type MatchQuery url.Values

+ func (MatchQuery) CaddyModule() caddy.ModuleInfo

+ func (m *MatchQuery) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchQuery) Match(r *http.Request) bool

+ type MatchRegexp struct

+ Name string

+ Pattern string

+ func (mre *MatchRegexp) Match(input string, repl *caddy.Replacer) bool

+ func (mre *MatchRegexp) Provision(caddy.Context) error

+ func (mre *MatchRegexp) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (mre *MatchRegexp) Validate() error

+ type MatchRemoteIP struct

+ Ranges []string

+ func (MatchRemoteIP) CaddyModule() caddy.ModuleInfo

+ func (m *MatchRemoteIP) Provision(ctx caddy.Context) error

+ func (m *MatchRemoteIP) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (m MatchRemoteIP) Match(r *http.Request) bool

+ type MatchVarsRE map[string]*MatchRegexp

+ func (MatchVarsRE) CaddyModule() caddy.ModuleInfo

+ func (m MatchVarsRE) Match(r *http.Request) bool

+ func (m MatchVarsRE) Provision(ctx caddy.Context) error

+ func (m MatchVarsRE) Validate() error

+ type MatcherSet []RequestMatcher

+ func (mset MatcherSet) Match(r *http.Request) bool

+ type MatcherSets []MatcherSet

+ func (ms *MatcherSets) FromInterface(matcherSets interface{}) error

+ func (ms MatcherSets) AnyMatch(req *http.Request) bool

+ type Middleware func(Handler) Handler

+ type MiddlewareHandler interface

+ ServeHTTP func(http.ResponseWriter, *http.Request, Handler) error

+ type RawMatcherSets []caddy.ModuleMap

+ type RequestMatcher interface

+ Match func(*http.Request) bool

+ type ResponseMatcher struct

+ Headers http.Header

+ StatusCode []int

+ func (rm ResponseMatcher) Match(statusCode int, hdr http.Header) bool

+ type ResponseRecorder interface

+ Buffer func() *bytes.Buffer

+ Buffered func() bool

+ Size func() int

+ Status func() int

+ WriteResponse func() error

+ func NewResponseRecorder(w http.ResponseWriter, buf *bytes.Buffer, shouldBuffer ShouldBufferFunc) ResponseRecorder

+ type ResponseWriterWrapper struct

+ func (rww *ResponseWriterWrapper) Flush()

+ func (rww *ResponseWriterWrapper) Hijack() (net.Conn, *bufio.ReadWriter, error)

+ func (rww *ResponseWriterWrapper) Push(target string, opts *http.PushOptions) error

+ type Route struct

+ Group string

+ Handlers []MiddlewareHandler

+ HandlersRaw []json.RawMessage

+ MatcherSets MatcherSets

+ MatcherSetsRaw RawMatcherSets

+ Terminal bool

+ func (r Route) Empty() bool

+ type RouteList []Route

+ func (routes RouteList) Compile(next Handler) Handler

+ func (routes RouteList) Provision(ctx caddy.Context) error

+ func (routes RouteList) ProvisionHandlers(ctx caddy.Context) error

+ func (routes RouteList) ProvisionMatchers(ctx caddy.Context) error

+ type Server struct

+ AutoHTTPS *AutoHTTPSConfig

+ Errors *HTTPErrorConfig

+ ExperimentalHTTP3 bool

+ IdleTimeout caddy.Duration

+ Listen []string

+ ListenerWrappersRaw []json.RawMessage

+ Logs *ServerLogConfig

+ MaxHeaderBytes int

+ ReadHeaderTimeout caddy.Duration

+ ReadTimeout caddy.Duration

+ Routes RouteList

+ StrictSNIHost *bool

+ TLSConnPolicies caddytls.ConnectionPolicies

+ WriteTimeout caddy.Duration

+ func (s *Server) ServeHTTP(w http.ResponseWriter, r *http.Request)

+ type ServerLogConfig struct

+ DefaultLoggerName string

+ LoggerNames map[string]string

+ SkipHosts []string

+ SkipUnmappedHosts bool

+ type ShouldBufferFunc func(status int, header http.Header) bool

+ type StaticError struct

+ Error string

+ StatusCode WeakString

+ func (StaticError) CaddyModule() caddy.ModuleInfo

+ func (e StaticError) ServeHTTP(w http.ResponseWriter, r *http.Request, _ Handler) error

+ type StaticResponse struct

+ Body string

+ Close bool

+ Headers http.Header

+ StatusCode WeakString

+ func (StaticResponse) CaddyModule() caddy.ModuleInfo

+ func (s *StaticResponse) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

+ func (s StaticResponse) ServeHTTP(w http.ResponseWriter, r *http.Request, _ Handler) error

+ type Subroute struct

+ Errors *HTTPErrorConfig

+ Routes RouteList

+ func (Subroute) CaddyModule() caddy.ModuleInfo

+ func (sr *Subroute) Provision(ctx caddy.Context) error

+ func (sr *Subroute) ServeHTTP(w http.ResponseWriter, r *http.Request, next Handler) error

+ type VarsMatcher map[string]string

+ func (VarsMatcher) CaddyModule() caddy.ModuleInfo

+ func (m VarsMatcher) Match(r *http.Request) bool

+ type VarsMiddleware map[string]string

+ func (VarsMiddleware) CaddyModule() caddy.ModuleInfo

+ func (t VarsMiddleware) ServeHTTP(w http.ResponseWriter, r *http.Request, next Handler) error

+ type WeakString string

+ func (ws *WeakString) UnmarshalJSON(b []byte) error

+ func (ws WeakString) Bool() bool

+ func (ws WeakString) Float64() float64

+ func (ws WeakString) Int() int

+ func (ws WeakString) MarshalJSON() ([]byte, error)

+ func (ws WeakString) String() string

Apr 2, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Apr 13, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Apr 9, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Apr 2, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Nov 4, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 29, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 28, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 14, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 10, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 7, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Oct 1, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 20, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Jan 1, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Dec 23, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Nov 18, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Sep 13, 2019 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Mar 24, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Mar 23, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Mar 19, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Mar 14, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Mar 13, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Feb 28, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Feb 9, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2

Jan 22, 2020 GO-2023-1567 +6 more

  GO-2023-1567: Open redirect in github.com/caddyserver/caddy/v2

  GO-2026-4535: Improper sanitization of glob characters in github.com/caddyserver/caddy/v2

  GO-2026-4536: Unicode case-folding causes incorrect split_path index in github.com/caddyserver/caddy/v2

  GO-2026-4537: Caddy is vulnerable to cross-origin config application via local admin API /load in github.com/caddyserver/caddy/v2

  GO-2026-4538: Caddy MatchPath %xx branch skips case normalization in github.com/caddyserver/caddy/v2

  GO-2026-4539: Caddy mTLS authentication fails open in github.com/caddyserver/caddy/v2

  GO-2026-4541: Caddy MatchHost becomes case-sensitive in github.com/caddyserver/caddy/v2