GO-2026-5743: Remote Admin Authorization Bypass in "/config" API via Array Index Normalization in github.com/caddyserver/caddy

network

package

v2.11.2 Latest Latest Go to latest Published: Mar 5, 2026 License: Apache-2.0 Imports: 7 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type ProxyFromNone struct{}

The "none" proxy source module disables the use of network proxy.

func (p ProxyFromNone) CaddyModule() caddy.ModuleInfo

func (p ProxyFromNone) ProxyFunc() func(*http.Request) (*url.URL, error)

ProxyFunc implements ProxyFuncProducer.

func (p ProxyFromNone) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

UnmarshalCaddyfile implements caddyfile.Unmarshaler.

type ProxyFromURL struct {
	URL string `json:"url"`
	// contains filtered or unexported fields
}

The "url" proxy source uses the defined URL as the proxy

func (p ProxyFromURL) CaddyModule() caddy.ModuleInfo

CaddyModule implements Module.

func (p *ProxyFromURL) Provision(ctx caddy.Context) error

func (p ProxyFromURL) ProxyFunc() func(*http.Request) (*url.URL, error)

ProxyFunc implements ProxyFuncProducer.

func (p *ProxyFromURL) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

UnmarshalCaddyfile implements caddyfile.Unmarshaler.

func (p ProxyFromURL) Validate() error

Validate implements Validator.