original_dst filter is robust to untrusted upstream #44398
+1
−1
CI (Envoy) / Envoy/Checks
succeeded
Apr 11, 2026 in 21m 18s
Envoy/Checks (success)
Check has finished
Details
Check run finished (success ✔️)
The check run can be viewed here:
Envoy/Checks (pr/44398/main@919968c)
Check started by
Request (pr/44398/main@919968c)
919968c 
#44398 merge main@ccb42a3
original_dst filter is robust to untrusted upstream
original_dst listener filter is robust to untrusted upstream by default because it does not observe or act on untrusted inputs from upstream servers.
This change is only to make an internal robot happy that verifies the match between extension security posture with product's threat model.
Risk Level: none
Testing: n/a
Docs Changes: n/a
Release Notes: n/a
Platform Specific Features: n/a
Environment
Request variables
| Key | Value |
|---|---|
| ref | 21ebcd1 |
| sha | 919968c |
| pr | 44398 |
| base-sha | ccb42a3 |
| actor | @yanavlasov |
| message | original_dst filter is robust to untrusted upstream... |
| started | 1775908961.028093 |
| target-branch | main |
| trusted | false |
Build image
Container image/s (as used in this CI run)
| Key | Value |
|---|---|
| default | docker.io/envoyproxy/envoy-build:86873047235e9b8232df989a5999b9bebf9db69c |
| mobile | docker.io/envoyproxy/envoy-build:mobile-86873047235e9b8232df989a5999b9bebf9db69c |
Version
Envoy version (as used in this CI run)
| Key | Value |
|---|---|
| major | 1 |
| minor | 38 |
| patch | 0 |
| dev | true |
Loading