s1d3sw1ped_bot 8e8e877533 Restrict Host-based origin fetches to Steam CDN names. ...

When upstream is empty the cache used the client Host as the fetch URL, so any LAN client with a spoofed Steam User-Agent could proxy to literal IPs or arbitrary names. Reject those hosts, stop following upstream redirects, and keep path-only cache keys so real Steam CDNs still share entries.

2026-08-31 23:56:03 +00:00

..

logger

Refactor VFS implementation to use Create and Open methods

2025-07-13 03:17:22 -05:00

metrics

Enhance Makefile and README for improved validation and cache management

2026-05-28 20:26:23 -05:00

coalescing.go

Add core components for request coalescing and service management

2026-05-28 01:17:30 -05:00

format.go

Add core components for request coalescing and service management

2026-05-28 01:17:30 -05:00

handler.go

Restrict Host-based origin fetches to Steam CDN names.

2026-08-31 23:56:03 +00:00

integration_test.go

Harden production gaps + improve build usability (from 2026 review)

2026-05-26 22:39:12 -05:00

ratelimit.go

Add core components for request coalescing and service management

2026-05-28 01:17:30 -05:00

service.go

Restrict Host-based origin fetches to Steam CDN names.

2026-08-31 23:56:03 +00:00

steamcache_test.go

Restrict Host-based origin fetches to Steam CDN names.

2026-08-31 23:56:03 +00:00

steamcache.go

Restrict Host-based origin fetches to Steam CDN names.

2026-08-31 23:56:03 +00:00