mirror of
https://github.com/ipfs/kubo.git
synced 2025-08-06 19:44:01 +08:00
1b490476e5
This commit upgrades go-ipfs-cmds and configures the commands HTTP API Handler to only allow POST/OPTIONS, disallowing GET and others in the handling of command requests in the IPFS HTTP API (where before every type of request method was handled, with GET/POST/PUT/PATCH being equivalent). The Read-Only commands that the HTTP API attaches to the gateway endpoint will additional handled GET as they did before (but stop handling PUT,DELETEs). By limiting the request types we address the possibility that a website accessed by a browser abuses the IPFS API by issuing GET requests to it which have no Origin or Referrer set, and are thus bypass CORS and CSRF protections. This is a breaking change for clients that relay on GET requests against the HTTP endpoint (usually :5001). Applications integrating on top of the gateway-read-only API should still work (including cross-domain access). Co-Authored-By: Steven Allen <steven@stebalien.com> Co-Authored-By: Marcin Rataj <lidel@lidel.org>
108 lines
4.3 KiB
Modula-2
108 lines
4.3 KiB
Modula-2
module github.com/ipfs/go-ipfs
|
|
|
|
require (
|
|
bazil.org/fuse v0.0.0-20200117225306-7b5117fecadc
|
|
github.com/AndreasBriese/bbloom v0.0.0-20190825152654-46b345b51c96 // indirect
|
|
github.com/blang/semver v3.5.1+incompatible
|
|
github.com/bren2010/proquint v0.0.0-20160323162903-38337c27106d
|
|
github.com/coreos/go-systemd/v22 v22.0.0
|
|
github.com/dustin/go-humanize v1.0.0
|
|
github.com/elgris/jsondiff v0.0.0-20160530203242-765b5c24c302
|
|
github.com/fatih/color v1.9.0 // indirect
|
|
github.com/fsnotify/fsnotify v1.4.9
|
|
github.com/go-bindata/go-bindata/v3 v3.1.3
|
|
github.com/gogo/protobuf v1.3.1
|
|
github.com/hashicorp/go-multierror v1.1.0
|
|
github.com/hashicorp/golang-lru v0.5.4
|
|
github.com/ipfs/go-bitswap v0.2.7
|
|
github.com/ipfs/go-block-format v0.0.2
|
|
github.com/ipfs/go-blockservice v0.1.3
|
|
github.com/ipfs/go-cid v0.0.5
|
|
github.com/ipfs/go-cidutil v0.0.2
|
|
github.com/ipfs/go-datastore v0.4.4
|
|
github.com/ipfs/go-detect-race v0.0.1
|
|
github.com/ipfs/go-ds-badger v0.2.3
|
|
github.com/ipfs/go-ds-flatfs v0.4.1
|
|
github.com/ipfs/go-ds-leveldb v0.4.2
|
|
github.com/ipfs/go-ds-measure v0.1.0
|
|
github.com/ipfs/go-filestore v0.0.3
|
|
github.com/ipfs/go-fs-lock v0.0.4
|
|
github.com/ipfs/go-graphsync v0.0.5
|
|
github.com/ipfs/go-ipfs-blockstore v0.1.4
|
|
github.com/ipfs/go-ipfs-chunker v0.0.5
|
|
github.com/ipfs/go-ipfs-cmds v0.2.1
|
|
github.com/ipfs/go-ipfs-config v0.4.0
|
|
github.com/ipfs/go-ipfs-ds-help v0.1.1
|
|
github.com/ipfs/go-ipfs-exchange-interface v0.0.1
|
|
github.com/ipfs/go-ipfs-exchange-offline v0.0.1
|
|
github.com/ipfs/go-ipfs-files v0.0.8
|
|
github.com/ipfs/go-ipfs-pinner v0.0.4
|
|
github.com/ipfs/go-ipfs-posinfo v0.0.1
|
|
github.com/ipfs/go-ipfs-provider v0.4.1
|
|
github.com/ipfs/go-ipfs-routing v0.1.0
|
|
github.com/ipfs/go-ipfs-util v0.0.1
|
|
github.com/ipfs/go-ipld-cbor v0.0.4
|
|
github.com/ipfs/go-ipld-format v0.0.2
|
|
github.com/ipfs/go-ipld-git v0.0.3
|
|
github.com/ipfs/go-ipns v0.0.2
|
|
github.com/ipfs/go-log v1.0.3
|
|
github.com/ipfs/go-merkledag v0.3.1
|
|
github.com/ipfs/go-metrics-interface v0.0.1
|
|
github.com/ipfs/go-metrics-prometheus v0.0.2
|
|
github.com/ipfs/go-mfs v0.1.1
|
|
github.com/ipfs/go-path v0.0.7
|
|
github.com/ipfs/go-unixfs v0.2.4
|
|
github.com/ipfs/go-verifcid v0.0.1
|
|
github.com/ipfs/interface-go-ipfs-core v0.2.6
|
|
github.com/jbenet/go-is-domain v1.0.3
|
|
github.com/jbenet/go-random v0.0.0-20190219211222-123a90aedc0c
|
|
github.com/jbenet/go-temp-err-catcher v0.1.0
|
|
github.com/jbenet/goprocess v0.1.4
|
|
github.com/libp2p/go-eventbus v0.1.0
|
|
github.com/libp2p/go-libp2p v0.7.4
|
|
github.com/libp2p/go-libp2p-circuit v0.2.1
|
|
github.com/libp2p/go-libp2p-connmgr v0.2.1
|
|
github.com/libp2p/go-libp2p-core v0.5.1
|
|
github.com/libp2p/go-libp2p-discovery v0.3.0
|
|
github.com/libp2p/go-libp2p-http v0.1.5
|
|
github.com/libp2p/go-libp2p-kad-dht v0.5.2
|
|
github.com/libp2p/go-libp2p-kbucket v0.2.3
|
|
github.com/libp2p/go-libp2p-loggables v0.1.0
|
|
github.com/libp2p/go-libp2p-mplex v0.2.3
|
|
github.com/libp2p/go-libp2p-peerstore v0.2.2
|
|
github.com/libp2p/go-libp2p-pubsub v0.2.6
|
|
github.com/libp2p/go-libp2p-pubsub-router v0.2.1
|
|
github.com/libp2p/go-libp2p-quic-transport v0.2.4-0.20200228032821-6d8b0e775c52
|
|
github.com/libp2p/go-libp2p-record v0.1.2
|
|
github.com/libp2p/go-libp2p-routing-helpers v0.1.0
|
|
github.com/libp2p/go-libp2p-secio v0.2.2
|
|
github.com/libp2p/go-libp2p-swarm v0.2.3
|
|
github.com/libp2p/go-libp2p-testing v0.1.1
|
|
github.com/libp2p/go-libp2p-tls v0.1.3
|
|
github.com/libp2p/go-libp2p-yamux v0.2.7
|
|
github.com/libp2p/go-maddr-filter v0.0.5
|
|
github.com/libp2p/go-socket-activation v0.0.2
|
|
github.com/mattn/go-runewidth v0.0.8 // indirect
|
|
github.com/mitchellh/go-homedir v1.1.0
|
|
github.com/mr-tron/base58 v1.1.3
|
|
github.com/multiformats/go-multiaddr v0.2.1
|
|
github.com/multiformats/go-multiaddr-dns v0.2.0
|
|
github.com/multiformats/go-multiaddr-net v0.1.4
|
|
github.com/multiformats/go-multibase v0.0.2
|
|
github.com/multiformats/go-multihash v0.0.13
|
|
github.com/opentracing/opentracing-go v1.1.0
|
|
github.com/pkg/errors v0.9.1
|
|
github.com/prometheus/client_golang v1.5.1
|
|
github.com/syndtr/goleveldb v1.0.0
|
|
github.com/whyrusleeping/base32 v0.0.0-20170828182744-c30ac30633cc
|
|
github.com/whyrusleeping/go-sysinfo v0.0.0-20190219211824-4a357d4b90b1
|
|
github.com/whyrusleeping/multiaddr-filter v0.0.0-20160516205228-e903e4adabd7
|
|
github.com/whyrusleeping/tar-utils v0.0.0-20180509141711-8c6c8ba81d5c
|
|
go.uber.org/fx v1.11.0
|
|
golang.org/x/crypto v0.0.0-20200323165209-0ec3e9974c59
|
|
golang.org/x/sys v0.0.0-20200331124033-c3d80250170d
|
|
gopkg.in/cheggaaa/pb.v1 v1.0.28
|
|
)
|
|
|
|
go 1.13
|