1
0
mirror of https://github.com/axllent/mailpit.git synced 2025-10-31 00:07:43 +02:00
Files
mailpit/server
Ralph Slooten 5ad8619893 Fix: Prevent potential information disclosure via indirect expvar library (Prometheus)
This is a security fix which prevents potential information disclosure due to a pre-registered HTTP route. The Prometheus client imports the go stdlib expvar, which in turn is auto-registers `/debug/vars` on the default servemux. This fix ensures no default/global routes are inherited via the http library.
2025-10-08 17:32:05 +13:00
..