Replace strings.Split(RemoteAddr, ":") with net.SplitHostPort for correct IPv6 address extraction in vote deduplication and comment IP tracking. Harden image proxy: add SSRF-safe transport blocking private/reserved IPs at connection time with DNS rebinding protection, sanitize error messages to prevent information leakage, add response size limit via io.LimitReader. Fix shadowed error variables in BlockedUsers, SetTitle, and Delete methods. Exclude gosec taint analysis false positives at linter config level.
32 lines
427 B
Plaintext
32 lines
427 B
Plaintext
*.cov
|
|
.cover
|
|
target
|
|
/logs/
|
|
/target/
|
|
/var/
|
|
debug
|
|
debug.test
|
|
.vscode
|
|
.idea/
|
|
*.prof
|
|
*.test
|
|
/rest-client.env.json
|
|
.DS_Store
|
|
.mongo
|
|
remark42
|
|
/bin/
|
|
/backend/var/
|
|
/backend/app/var/
|
|
/backend/app/cmd/web/
|
|
/backend/*.html.tmpl
|
|
compose-private-backend.yml
|
|
compose-private-frontend.yml
|
|
compose-private.yml
|
|
/backend/_example/*/vendor
|
|
http-client.env.json
|
|
/playwright-report/
|
|
/backend/app/cmd/var
|
|
|
|
# ralphex progress logs
|
|
.ralphex/progress/
|