Secure intermediary Redfish server

Clone this repo:

Branches

  1. 95807a7 Fix 8 ClangTidyLegacy findings: by vBMC Team · 13 hours ago master
  2. 5ef41d1 Add FieldOverride config to StaticResource plugin proto and metric templates. by Rishabh Jain · 2 weeks ago
  3. c2f7f49 BEGIN_PUBLIC Prevent DoS and thread starvation in Redfish session token refresh. by vBMC Team · 7 weeks ago
  4. 41ffbe4 Bound metric label cardinality for user-controlled Redfish URIs. by vBMC Team · 8 weeks ago
  5. bb97fd0 [vBMC][Equillibrium] Fix Timer::Start TOCTOU Race Condition Leads to Memory Corruption and Custom Ticker Deadlock issue. by vBMC Team · 8 weeks ago
  6. f8df049 [vBMC][Equillibrium] Fix missing unix_socket_path mapping in ToHttpClientRequest leads to SSRF and Credential Exposure issue by vBMC Team · 9 weeks ago
  7. 57d9cf9 [vBMC][Equillibrium] Fix process In-Flight Network Requests Use-After-Free via Object Destruction Ordering Flaw by vBMC Team · 9 weeks ago
  8. 42337aa Add platform_type metric and configuration to vbmc daemons by Rishabh Jain · 2 months ago
  9. 34e3411 Fix Missing Log Fetches Data Race in vBMC by vBMC Team · 3 months ago
  10. 9550890 Fix 5 ClangInliner findings: by vBMC Team · 3 months ago
  11. 13d6a68 Fix 12 ClangInliner findings: by vBMC Team · 3 months ago
  12. 36ca45a Fix Proxy Initialization Synchronization in vBMC by vBMC Team · 3 months ago
  13. 5c8d8be Included header "third_party/absl/base/no_destructor.h" is not used directly by vBMC Team · 3 months ago
  14. ce8fb42 Used header <functional> is not included directly by vBMC Team · 3 months ago
  15. 30ec074 Used header "third_party/absl/base/log_severity.h" is not included directly by vBMC Team · 4 months ago
  16. 4488525 Fix Use-After-Free in G3Thread and DeferredStatus by Rishabh Jain · 4 months ago
  17. 01cbab7 Fix path traversal bypass in ResourceMatches by normalizing URIs by Rishabh Jain · 4 months ago
  18. 6ef5915 Fix critical concurrency bugs in platform plugins and event manager by vBMC Team · 4 months ago
  19. 2e7ce37 Fix query parameter bypass in ResourceMatches by URL-decoding query params by Rishabh Jain · 4 months ago
  20. a844ef5 Fix concurrent races in events manager and oauth plugin by Rishabh Jain · 4 months ago