Matthew HoltandCopilot fe69f5da2d caddyhttp: enforce bounded host metric labels on HTTPS ...

With per_host metrics, HTTPS servers automatically observed catch-all
hosts, and port/case variants of configured hosts produced distinct
labels. Require explicit observe_catchall_hosts for unconfigured hosts,
normalize the host label, and also collect hosts from subroutes, error
routes and named routes (scanned after handlers are provisioned).

Behavior change: unconfigured hosts on HTTPS servers are now labeled
"_other" unless observe_catchall_hosts is enabled.

Addresses scan report 457dcf090b421495.

Code written by GitHub Copilot (GPT-6.1 Sol, Claude Opus 5.5); reviewed by mholt.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

2026-11-11 11:06:40 -07:00

..

caddyevents

events: tell CertMagic which events are worth emitting (#8010)

2026-10-03 01:03:20 +10:00

caddyfs

…

caddyhttp

caddyhttp: enforce bounded host metric labels on HTTPS

2026-11-11 11:06:40 -07:00

caddypki

acmeserver: say when the CA database is locked by another process (#8007)

2026-09-11 14:49:31 +10:00

caddytls

caddytls: require a trust pool for client cert verification modes (#8394)

2026-11-10 09:09:17 +00:00

filestorage

…

internal/network

reverseproxy: reduce lock contention in dynamic SRV and A upstreams (#7949)

2026-11-03 08:37:50 +00:00

logging

logging: Parse request URIs in the query filter like the server does (#8255)

2026-10-19 07:43:29 +00:00

metrics

…

standard

…