Harshavardhana e0fe7cc391 fix: information disclosure bug in preconditions GET (#19810) ...

precondition check was being honored before, validating
if anonymous access is allowed on the metadata of an
object, leading to metadata disclosure of the following
headers.

```
Last-Modified
Etag
x-amz-version-id
Expires:
Cache-Control:
```

although the information presented is minimal in nature,
and of opaque nature. It still simply discloses that an
object by a specific name exists or not without even having
enough permissions.

2024-05-27 12:17:46 -07:00

68 B

Raw Blame History

View Raw