1
0
mirror of https://github.com/minio/minio.git synced 2025-01-16 01:03:15 -05:00
Harshavardhana e0fe7cc391
fix: information disclosure bug in preconditions GET ()
precondition check was being honored before, validating
if anonymous access is allowed on the metadata of an
object, leading to metadata disclosure of the following
headers.

```
Last-Modified
Etag
x-amz-version-id
Expires:
Cache-Control:
```

although the information presented is minimal in nature,
and of opaque nature. It still simply discloses that an
object by a specific name exists or not without even having
enough permissions.
2024-05-27 12:17:46 -07:00
..