Security

xds/rbac: Fix a bug where nested Principal or Permission rules with :scheme or grpc- prefixed header matchers were not rejected, which could cause DENY rules to fail open. (#9258)
- Special Thanks: @nvxbug
xds/rbac: Fix a bug where the host header matcher was not being replaced with :authority in nested Principal or Permission rules. (#9258)
- Special Thanks: @nvxbug
xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as X-Role, matched no header, which could cause DENY rules to fail open. (#9332)
- Special Thanks: @alimony
xds/rbac: Fix a bug where a :scheme or grpc- prefixed header matcher was accepted when its name was not lowercase. (#9332)
- Special Thanks: @alimony
xds/rbac: Fix a bug where a Host header matcher was not replaced with :authority. (#9332)
- Special Thanks: @alimony

Performance