Skip to content

Releases: cactus/go-camo

v2.0.0-alpha.1

04 Sep 09:57
Compare
Choose a tag to compare
v2.0.0-alpha.1 Pre-release
Pre-release
  • Remove --allow-list flag, and replace with a unified filtering flag filter-ruleset.
    See FILTER_FORMAT.md for more information on the accepted syntax.

v1.1.7

14 Aug 21:08
Compare
Choose a tag to compare
  • Remove old stats flag, endpoint, and feature, in favor of the new
    premetheus endpoint. Good amount of code removal as well.
  • Use a sync.Pool []byte buffer for io.CopyBuffer (instead of io.Copy). It
    should reduce some small amount of GC pressure (a bit less garbage).
  • Build with go1.12.8 - which includes security fixes for http/2.

v1.1.6

26 Jul 23:33
Compare
Choose a tag to compare
  • Support range requests to get safari video support working (#36)

v1.1.5

26 Jul 17:51
9b59427
Compare
Choose a tag to compare
  • Security fixes / SSRF
    • Fix: Ensure non-GET/HEAD request does not send outbound request (#35)
    • Fix: Validate redirect urls the same as initial urls (#35)
  • Split out exception for missing content types (#32)
  • Prometheus compatible metrics endpoint added (#34)
  • Disabled credential/userinfo (user:pass@ style) type urls by default.
    Added cli flag (--allow-credential-urls) to retain prior behavior (which
    allows them).

v1.1.4

27 Feb 01:15
Compare
Choose a tag to compare
  • disable passing/generating x-forwarded-for header by default
  • add new --enable-xfwd4 flag to enable x-forwarded-for header passing/generation
  • add optional json output for stats
  • remove gomaxprocs code, as it is no longer necessary
  • documentation fixes (man page update, spelling, etc)
  • build release with go-1.12

v1.1.3

15 Sep 07:09
Compare
Choose a tag to compare
  • switch to go-1.11 w/GO111MODULE support
    this makes building outside GOPATH easy.
    Looks like heroku supports it now too? (heroku-buildpack-go issue #249)
  • build release binaries with go-1.11
  • fix ipv6 length comparison

v1.1.2

30 Jul 23:03
Compare
Choose a tag to compare
  • fix SSRF leak, where certain requests would not match defined and custom ip
    blacklists as expected

v1.1.1

18 Jul 17:32
Compare
Choose a tag to compare
  • change /healthcheck response to 200 instead of 204.
    solves configuration issue with some loadbalancers.

v1.1.0

17 Jul 00:20
Compare
Choose a tag to compare
  • add flag to allow video/* as content type (disabled by default)
  • allow setting custom server name
  • add flag to expose the current version version in http response header
    (similar to how it is done for -V cli output)
  • change root route to return 404
  • add /healthcheck route that returns 204 status (no body content)
    useful for load balancers to check that service is running

v1.0.18

16 May 05:04
Compare
Choose a tag to compare
  • change repo layout and build pipeline to dep/gox/GOPATH style
  • lint fixes and minor struct alignment changes (minor optimization)
  • update mlog dependency
  • build with go-1.10.2