envoyproxy / envoy

Cloud-native high-performance edge/middle/service proxy
https://www.envoyproxy.io
Apache License 2.0
25.07k stars 4.82k forks source link

csrf: increase only one counter per request #37289

Open mkauf opened 23 hours ago

mkauf commented 23 hours ago

Requests with an invalid origin should increase only the counter "missing_source_origin" but not the counter "request_invalid".

Before this bugfix, the counter "request_invalid" was also increased, depending on the value of the "Host" or ":authority" header.

Risk Level: Low (only metrics affected) Testing: With improved tests