mirror of
https://github.com/moby/moby.git
synced 2022-11-09 12:21:53 -05:00
44a8e10bfc
AWS recently launched a new version of the EC2 Instance Metadata Service, which is used to provide credentials to the awslogs driver when running on Amazon EC2. This new version of the IMDS adds defense-in-depth mechanisms against open firewalls, reverse proxies, and SSRF vulnerabilities and is generally an improvement over the previous version. An updated version of the AWS SDK is able to handle the both the previous version and the new version of the IMDS and functions when either is enabled. More information about IMDSv2 is available at the following links: * https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/ * https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html Closes https://github.com/moby/moby/issues/40422 Signed-off-by: Samuel Karp <skarp@amazon.com>
35 lines
982 B
Go
35 lines
982 B
Go
package ini
|
|
|
|
// Statement is an empty AST mostly used for transitioning states.
|
|
func newStatement() AST {
|
|
return newAST(ASTKindStatement, AST{})
|
|
}
|
|
|
|
// SectionStatement represents a section AST
|
|
func newSectionStatement(tok Token) AST {
|
|
return newASTWithRootToken(ASTKindSectionStatement, tok)
|
|
}
|
|
|
|
// ExprStatement represents a completed expression AST
|
|
func newExprStatement(ast AST) AST {
|
|
return newAST(ASTKindExprStatement, ast)
|
|
}
|
|
|
|
// CommentStatement represents a comment in the ini definition.
|
|
//
|
|
// grammar:
|
|
// comment -> #comment' | ;comment'
|
|
// comment' -> epsilon | value
|
|
func newCommentStatement(tok Token) AST {
|
|
return newAST(ASTKindCommentStatement, newExpression(tok))
|
|
}
|
|
|
|
// CompletedSectionStatement represents a completed section
|
|
func newCompletedSectionStatement(ast AST) AST {
|
|
return newAST(ASTKindCompletedSectionStatement, ast)
|
|
}
|
|
|
|
// SkipStatement is used to skip whole statements
|
|
func newSkipStatement(ast AST) AST {
|
|
return newAST(ASTKindSkipStatement, ast)
|
|
}
|