Skip to content

net/http/pprof: assess and document security implications of the goroutines endpoint #46307

Open
Open
net/http/pprof: assess and document security implications of the goroutines endpoint#46307
Labels
DocumentationIssues describing a change to documentation.NeedsFixThe path to resolution is known, but the work has not been done.Securitycompiler/runtimeIssues related to the Go compiler and/or runtime.
Milestone
Go1.27
@FiloSottile

Description

@FiloSottile
FiloSottile
opened on May 21, 2021

The net/http/pprof endpoints include stack traces with integer arguments, which can leak sensitive information depending on the settings. We should mention that in the docs.

Metadata

Metadata

Assignees

No one assigned

    Labels

    DocumentationIssues describing a change to documentation.NeedsFixThe path to resolution is known, but the work has not been done.Securitycompiler/runtimeIssues related to the Go compiler and/or runtime.

    Type

    No type

    Projects

    Go Compiler / Runtime / Command

    Status

    Todo

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions