Feng Ruohang ea37a7e8b0 fix(s3): enforce tag count and object lock permissions on proxy reads ...

Skip x-amz-tagging-count and X-Amz-Tagging in setObjectHeaders UserDefined iteration and proxyHeadToRepTarget metadata copies so opts.TaggingCount/opts.Tagging remains the sole gate without emitting duplicate headers. Make FilterObjectLockMetadata case-insensitive so canonical-case X-Amz-Object-Lock-* headers from peer HEAD responses are stripped when s3:GetObjectRetention or s3:GetObjectLegalHold is denied while preserved for authorized callers.

Signed-off-by: Feng Ruohang <rh@vonng.com>

2026-11-12 10:18:54 +08:00

..

lock_test.go

fix(s3): enforce tag count and object lock permissions on proxy reads

2026-11-12 10:18:54 +08:00

lock.go

fix(s3): enforce tag count and object lock permissions on proxy reads

2026-11-12 10:18:54 +08:00