xsrftoken

Dec 4, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Nov 8, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Oct 4, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Sep 5, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Aug 6, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Jul 5, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Jun 4, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

May 6, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Apr 4, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Apr 3, 2024 GO-2024-3333

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Mar 4, 2024 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Feb 7, 2024 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Jan 8, 2024 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Nov 27, 2023 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Nov 8, 2023 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Oct 10, 2023 GO-2024-2687 +1 more

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Oct 5, 2023 GO-2023-2102 +2 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Sep 5, 2023 GO-2023-2102 +2 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Aug 4, 2023 GO-2023-2102 +2 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Aug 1, 2023 GO-2023-2102 +2 more

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Jul 5, 2023 GO-2023-1988 +3 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Jun 13, 2023 GO-2023-1988 +3 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

May 4, 2023 GO-2023-1988 +3 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Apr 6, 2023 GO-2023-1988 +3 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Mar 5, 2023 GO-2023-1988 +3 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Feb 14, 2023 GO-2023-1988 +3 more

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Feb 8, 2023 GO-2023-1571 +4 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Jan 4, 2023 GO-2023-1571 +4 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Dec 6, 2022 GO-2023-1571 +4 more

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Dec 6, 2022 GO-2022-1144 +5 more

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Nov 7, 2022 GO-2022-1144 +5 more

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Oct 19, 2022 GO-2022-1144 +6 more

  GO-2022-1144: Excessive memory growth in net/http and golang.org/x/net/http2

  GO-2023-1495: Request smuggling due to improper request handling in golang.org/x/net/http2/h2c

  GO-2023-1571: Denial of service via crafted HTTP/2 stream in net/http and golang.org/x/net

  GO-2023-1988: Improper rendering of text nodes in golang.org/x/net/html

  GO-2023-2102: HTTP/2 rapid reset can cause excessive work in net/http

  GO-2024-2687: HTTP/2 CONTINUATION flood in net/http

  GO-2024-3333: Non-linear parsing of case-insensitive content in golang.org/x/net/html

Changes in this version

+ const Timeout

+ func Generate(key, userID, actionID string) string

+ func Valid(token, key, userID, actionID string) bool

+ func ValidFor(token, key, userID, actionID string, timeout time.Duration) bool