original_dst filter is robust to untrusted upstream #44398
+1
−1
CI (Envoy) / Mobile/ASAN
skipped
Apr 11, 2026 in 0s
Check was skipped
This check was not triggered in this CI run
Details
Request (pr/44398/main@919968c)
919968c 
#44398 merge main@ccb42a3
original_dst filter is robust to untrusted upstream
original_dst listener filter is robust to untrusted upstream by default because it does not observe or act on untrusted inputs from upstream servers.
This change is only to make an internal robot happy that verifies the match between extension security posture with product's threat model.
Risk Level: none
Testing: n/a
Docs Changes: n/a
Release Notes: n/a
Platform Specific Features: n/a
Environment
Request variables
| Key | Value |
|---|---|
| ref | 21ebcd1 |
| sha | 919968c |
| pr | 44398 |
| base-sha | ccb42a3 |
| actor | @yanavlasov |
| message | original_dst filter is robust to untrusted upstream... |
| started | 1775908961.028093 |
| target-branch | main |
| trusted | false |
Build image
Container image/s (as used in this CI run)
| Key | Value |
|---|---|
| default | docker.io/envoyproxy/envoy-build:86873047235e9b8232df989a5999b9bebf9db69c |
| mobile | docker.io/envoyproxy/envoy-build:mobile-86873047235e9b8232df989a5999b9bebf9db69c |
Version
Envoy version (as used in this CI run)
| Key | Value |
|---|---|
| major | 1 |
| minor | 38 |
| patch | 0 |
| dev | true |
Loading