Add [filter:tempurl]/path_prefix configuration option If swiftproxy endpoint is something like /object, with URL rewriting by haproxy, then the hmac calculation is wrong. . This patch adds a new path_prefix directive which is stripped away in the URLs before calculating the tempurl hmac.
[PATCH] s3api: Prevent XXE injections Previously, clients could use XML external entities (XXEs) to read arbitrary files from proxy-servers and inject the content into the request. Since many S3 APIs reflect request content back to the user, this could be used to extract any secrets that the swift user could read, such as tempauth credentials, keymaster secrets, etc.
Now, disable entity resolution -- any unknown entities will be replaced with an empty string. Without resolving the entities, the request is still processed.
