fix: #12

11notes · 11notes · commit 08d8ef7529f5 · 2025-10-13T13:25:40.000+02:00
diff --git a/go/socket-proxy/main.go b/go/socket-proxy/main.go
@@ -84,7 +84,7 @@ func httpProxyBlockedPaths(url string) bool {
 		regexp.MustCompile(`(?i)secrets.*`), // could exfil credentials
 		regexp.MustCompile(`(?i)configs.*`), // could exfil credentials
 		regexp.MustCompile(`(?i)swarm/unlockkey.*`), // could exfil credentials
-		regexp.MustCompile(`(?i)images/get.*`), // could exfil container data
+		regexp.MustCompile(`(?i)images/get(/|)$`), // could exfil container data
 	}
 
 	for _, pattern := range blockedPatterns {

Original file line number	Diff line number	Diff line change
`@@ -84,7 +84,7 @@ func httpProxyBlockedPaths(url string) bool {`
`84`	`84`	regexp.MustCompile(`(?i)secrets.*`), // could exfil credentials
`85`	`85`	regexp.MustCompile(`(?i)configs.*`), // could exfil credentials
`86`	`86`	regexp.MustCompile(`(?i)swarm/unlockkey.*`), // could exfil credentials
`87`		- regexp.MustCompile(`(?i)images/get.*`), // could exfil container data
	`87`	+ regexp.MustCompile(`(?i)images/get(/\|)$`), // could exfil container data
`88`	`88`	`}`
`89`	`89`
`90`	`90`	`for _, pattern := range blockedPatterns {`