Affected by GO-2022-0785 and 10 other vulnerabilities

GO-2022-0785: "catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

GO-2022-0865: Authenticated users can exploit an enumeration vulnerability in Harbor in github.com/goharbor/harbor

GO-2023-2109: Harbor timing attack risk in github.com/goharbor/harbor

GO-2024-2915: Open Redirect URL in Harbor in github.com/goharbor/harbor

GO-2024-2916: SQL Injection in Harbor scan log API in github.com/goharbor/harbor

GO-2024-3013: Harbor fails to validate the user permissions when updating project configurations in github.com/goharbor/harbor

GO-2025-3825: Harbor repository description page has Cross-site Scripting vulnerability in github.com/goharbor/harbor

GO-2025-3826: Possible ORM Leak Vulnerability in the Harbor in github.com/goharbor/harbor

filter

package

v1.4.0-rc2 Latest Latest Go to latest Published: Feb 2, 2018 License: Apache-2.0 Imports: 19 Imported by: 0

Details

This section is empty.

This section is empty.

func GetProjectManager(req *http.Request) (promgr.ProjectManager, error)

GetProjectManager tries to get project manager from request and returns it

func GetSecurityContext(req *http.Request) (security.Context, error)

GetSecurityContext tries to get security context from request and returns it

func Init()

Init ReqCtxMofiers list

func MediaTypeFilter(mediaType ...string) func(*beegoctx.Context)

MediaTypeFilter filters the POST request, it returns 415 if the content type of the request doesn't match the preset ones.

func SecurityFilter(ctx *beegoctx.Context)

SecurityFilter authenticates the request and passes a security context and a project manager with it which can be used to do some authN & authZ

type ReqCtxModifier interface {
	Modify(*beegoctx.Context) bool
}

ReqCtxModifier modifies the context of request