agollo

agollo copied to clipboard

viper说明文档 好像不全

1


a67793581

viper 支持 secretKey

1

type defaultRemoteProvider struct { provider string endpoint string path string secretKeyring string } 作者考虑升级吗

a67793581

签名计算bug

2

ConfigServerURL = http://apollo.meta/configsvc-dev 时, 使用token计算签名时,会把 pathwithquery部分的 /configsvc-dev 漏掉,导致签名失败, 建议在使用requestURI时,不要简单拼接,而是使用url.parse获取 

kinglf

依赖的github.com/bketelsen/crypt 0.0.4 （depend github.com/hashicorp/consul/api v1.1.0） 版本太低，存在 CWE-285/CWE-770/CWE-125/CWE-863/CWE-79安全漏洞。 HashiCorp Consul is vulnerable to privilege escalation due to the improper authorization of certificates that are being used for Raft requests. A remote...

jiezinaxumi

chore(deps): bump github.com/bketelsen/crypt from from v0.0.4 to v0.0.5

jiezinaxumi