Affected by GO-2026-5090 and 4 other vulnerabilities

GO-2026-5090: zrok: Broken ownership check in DELETE /api/v2/unaccess allows non-admin to delete global frontend records in github.com/openziti/zrok

GO-2026-5118: zrok: Reflected XSS in GitHub OAuth callback via unsanitized refreshInterval error rendering in github.com/openziti/zrok

GO-2026-5203: zrok: WebDAV drive backend follows symlinks outside DriveRoot, enabling host filesystem read/write in github.com/openziti/zrok

GO-2026-5315: zrok copy writes attacker-controlled WebDAV paths outside the destination root in github.com/openziti/zrok

GO-2026-5329: zrok: Unauthenticated DoS via unbounded memory allocation in striped session cookie parsing in github.com/openziti/zrok

The highest tagged major version is v2.

proxy

package

v1.1.13 Latest Latest Go to latest Published: Sep 28, 2026 License: Apache-2.0 Imports: 31 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/openziti/zrok

Links

Open Source Insights

Documentation ¶

Index ¶

func SetCaddyLoggingWriter(w io.WriteCloser)
type Backend
- func NewBackend(cfg *BackendConfig) (*Backend, error)
- func (b *Backend) Run() error
- func (b *Backend) Stop() error
type BackendConfig
type CaddyLogWriter
- func (CaddyLogWriter) CaddyModule() caddy.ModuleInfo
- func (CaddyLogWriter) OpenWriter() (io.WriteCloser, error)
- func (w *CaddyLogWriter) Provision(_ caddy.Context) error
- func (CaddyLogWriter) String() string
- func (*CaddyLogWriter) UnmarshalCaddyfile(_ *caddyfile.Dispenser) error
- func (CaddyLogWriter) WriterKey() string
type CaddyWebBackend
- func NewCaddyWebBackend(cfg *CaddyWebBackendConfig) (*CaddyWebBackend, error)
- func (c *CaddyWebBackend) Requests() func() int32
- func (c *CaddyWebBackend) Run() error
- func (c *CaddyWebBackend) Stop() error
type CaddyWebBackendConfig
type CaddyfileBackend
- func NewCaddyfileBackend(cfg *CaddyfileBackendConfig) (*CaddyfileBackend, error)
- func (b *CaddyfileBackend) Run() error
type CaddyfileBackendConfig
type Frontend
- func NewFrontend(cfg *FrontendConfig) (*Frontend, error)
- func (h *Frontend) Run() error
type FrontendConfig
- func DefaultFrontendConfig(identityName string) *FrontendConfig
type ZrokRequestsMiddleware
- func (ZrokRequestsMiddleware) CaddyModule() caddy.ModuleInfo
- func (m *ZrokRequestsMiddleware) Provision(ctx caddy.Context) error
- func (m ZrokRequestsMiddleware) ServeHTTP(w http.ResponseWriter, r *http.Request, next caddyhttp.Handler) error
- func (m *ZrokRequestsMiddleware) UnmarshalCaddyfile(d *caddyfile.Dispenser) error
- func (m ZrokRequestsMiddleware) Validate() error

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func SetCaddyLoggingWriter ¶ added in v0.4.6

func SetCaddyLoggingWriter(w io.WriteCloser)

Types ¶

type Backend ¶

type Backend struct {
	// contains filtered or unexported fields
}

func NewBackend ¶

func NewBackend(cfg *BackendConfig) (*Backend, error)

func (*Backend) Run ¶

func (b *Backend) Run() error

func (*Backend) Stop ¶ added in v1.0.0

func (b *Backend) Stop() error

type BackendConfig ¶

type BackendConfig struct {
	IdentityPath    string
	EndpointAddress string
	ShrToken        string
	Insecure        bool
	Requests        chan *endpoints.Request
	SuperNetwork    bool
}

type CaddyLogWriter ¶ added in v0.4.6

type CaddyLogWriter struct{}

func (CaddyLogWriter) CaddyModule ¶ added in v0.4.6

func (CaddyLogWriter) CaddyModule() caddy.ModuleInfo

func (CaddyLogWriter) OpenWriter ¶ added in v0.4.6

func (CaddyLogWriter) OpenWriter() (io.WriteCloser, error)

func (*CaddyLogWriter) Provision ¶ added in v0.4.6

func (w *CaddyLogWriter) Provision(_ caddy.Context) error

func (CaddyLogWriter) String ¶ added in v0.4.6

func (CaddyLogWriter) String() string

func (*CaddyLogWriter) UnmarshalCaddyfile ¶ added in v0.4.6

func (*CaddyLogWriter) UnmarshalCaddyfile(_ *caddyfile.Dispenser) error

func (CaddyLogWriter) WriterKey ¶ added in v0.4.6

func (CaddyLogWriter) WriterKey() string

type CaddyWebBackend ¶ added in v0.4.6

type CaddyWebBackend struct {
	// contains filtered or unexported fields
}

func NewCaddyWebBackend ¶ added in v0.4.6

func NewCaddyWebBackend(cfg *CaddyWebBackendConfig) (*CaddyWebBackend, error)

func (*CaddyWebBackend) Requests ¶ added in v0.4.6

func (c *CaddyWebBackend) Requests() func() int32

func (*CaddyWebBackend) Run ¶ added in v0.4.6

func (c *CaddyWebBackend) Run() error

func (*CaddyWebBackend) Stop ¶ added in v1.0.0

func (c *CaddyWebBackend) Stop() error

type CaddyWebBackendConfig ¶ added in v0.4.6

type CaddyWebBackendConfig struct {
	IdentityPath string
	WebRoot      string
	ShrToken     string
	Requests     chan *endpoints.Request
}

type CaddyfileBackend ¶ added in v0.4.6

type CaddyfileBackend struct {
	// contains filtered or unexported fields
}

func NewCaddyfileBackend ¶ added in v0.4.6

func NewCaddyfileBackend(cfg *CaddyfileBackendConfig) (*CaddyfileBackend, error)

func (*CaddyfileBackend) Run ¶ added in v0.4.6

func (b *CaddyfileBackend) Run() error

type CaddyfileBackendConfig ¶ added in v0.4.6

type CaddyfileBackendConfig struct {
	CaddyfilePath string
	Shr           *sdk.Share
	Requests      chan *endpoints.Request
}

type Frontend ¶

type Frontend struct {
	// contains filtered or unexported fields
}

func NewFrontend ¶

func NewFrontend(cfg *FrontendConfig) (*Frontend, error)

func (*Frontend) Run ¶

func (h *Frontend) Run() error

type FrontendConfig ¶

type FrontendConfig struct {
	IdentityName    string
	ShrToken        string
	Address         string
	ResponseHeaders []string
	Tls             *endpoints.TlsConfig
	RequestsChan    chan *endpoints.Request
	SuperNetwork    bool
}

func DefaultFrontendConfig ¶

func DefaultFrontendConfig(identityName string) *FrontendConfig

type ZrokRequestsMiddleware ¶ added in v0.4.6

type ZrokRequestsMiddleware struct{}

func (ZrokRequestsMiddleware) CaddyModule ¶ added in v0.4.6

func (ZrokRequestsMiddleware) CaddyModule() caddy.ModuleInfo

CaddyModule returns the Caddy module information.

func (*ZrokRequestsMiddleware) Provision ¶ added in v0.4.6

func (m *ZrokRequestsMiddleware) Provision(ctx caddy.Context) error

Provision implements caddy.Provisioner.

func (ZrokRequestsMiddleware) ServeHTTP ¶ added in v0.4.6

func (m ZrokRequestsMiddleware) ServeHTTP(w http.ResponseWriter, r *http.Request, next caddyhttp.Handler) error

ServeHTTP implements caddyhttp.MiddlewareHandler.

func (*ZrokRequestsMiddleware) UnmarshalCaddyfile ¶ added in v0.4.6

func (m *ZrokRequestsMiddleware) UnmarshalCaddyfile(d *caddyfile.Dispenser) error

UnmarshalCaddyfile implements caddyfile.Unmarshaler.

func (ZrokRequestsMiddleware) Validate ¶ added in v0.4.6

func (m ZrokRequestsMiddleware) Validate() error

Validate implements caddy.Validator.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL