IntenseWebs/opentofu
3
0
Fork 0
mirror of https://github.com/opentofu/opentofu.git synced 2025-02-25 18:45:20 -06:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #31164 from hashicorp/jbardin/go-getter-security-options

Browse Source 
add XTerraformGetLimit to prevent redirect loops
This commit is contained in:
James Bardin 2022-06-01 13:04:20 -04:00 committed by GitHub
commit 4fb8a5a3ec
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
internal/command/providers_mirror.go
View File

@ -96,6 +96,7 @@ func (c *ProvidersMirrorCommand) Run(args []string) int {
httpGetter := getter.HttpGetter{ httpGetter := getter.HttpGetter{
Client: httpclient.New(), Client: httpclient.New(),
Netrc: true, Netrc: true,
XTerraformGetDisabled: true,
} }
// The following logic is similar to that used by the provider installer // The following logic is similar to that used by the provider installer

1
internal/getmodules/getter.go
View File

@ -85,6 +85,7 @@ var getterHTTPClient = cleanhttp.DefaultClient()
var getterHTTPGetter = &getter.HttpGetter{ var getterHTTPGetter = &getter.HttpGetter{
Client: getterHTTPClient, Client: getterHTTPClient,
Netrc: true, Netrc: true,
XTerraformGetLimit: 10,
} }
// A reusingGetter is a helper for the module installer that remembers // A reusingGetter is a helper for the module installer that remembers