Mitigate three security vulnerabilties. (#113)

- CVE-2022-4886
- CVE-2023-5043
- CVE-2023-5044

Background: https://thehackernews.com/2023/10/urgent-new-security-flaws-discovered-in.html

Slack thread: https://uffizzi-internal.slack.com/archives/CN8MKSAQ5/p1699477649073349

charts/uffizzi-controller/Chart.yaml

@@ -1,6 +1,6 @@
 apiVersion: v2
 name: uffizzi-controller
-version: 2.2.10
+version: 2.3.0
 kubeVersion: ">= 1.21.6-0" # https://issuetracker.google.com/issues/77503699
 description: "A smart proxy service that handles requests from Uffizzi App to the Kubernetes API - 1 of 3 services (controller, uffizzi_app, uffizzi_cli) that comprise the uffizzi full-stack previews engine which automates trigger-based on-demand preview environments"
 type: application

charts/uffizzi-controller/values.yaml

@@ -14,9 +14,11 @@ cert-manager: # dependency
 
 ingress-nginx:
   controller:
+    enableAnnotationValidations: true
     config:
       proxy-body-size: "100m"
       proxy-buffer-size: "128k"
+      strict-validate-path-type: true
     extraArgs:
       enable-ssl-passthrough: true