rgw: reject unauthenticated response-header actions
authorMatt Benjamin <mbenjamin@redhat.com>
Fri, 27 Mar 2020 17:13:48 +0000 (18:13 +0100)
committerBastien Roucariès <rouca@debian.org>
Sat, 21 Oct 2023 16:42:26 +0000 (17:42 +0100)
commite3be5c9232f2bfb5628195e2f2ffeb3bd617c9e2
tree61ef127187a54070ea32f2d17328e16ebfba98fa
parent3cd1818af7c22348a98bfa71441d5a47cbecdcce
rgw: reject unauthenticated response-header actions

Signed-off-by: Matt Benjamin <mbenjamin@redhat.com>
Reviewed-by: Casey Bodley <cbodley@redhat.com>
(cherry picked from commit d8dd5e513c0c62bbd7d3044d7e2eddcd897bd400)

Origin: upstream, https://github.com/ceph/ceph/pull/34504/commits/ba0790a01ba5252db1ebc299db6e12cd758d0ff9

Gbp-Pq: Name CVE-2020-1760-1.patch
src/rgw/rgw_rest_s3.cc