Dmitry VerkhoturovandUmputun e98657a88a chore(lint): cap multipart upload size and suppress remaining gosec G70x ...

Address all golangci-lint v2.10.1 (CI's version) findings:

* Add http.MaxBytesReader hard cap to ParseMultipartForm sites in
  rest_private.savePictureCtrl (32MB) and api/migrator (256MB) — fixes
  G120 by bounding total request body before form parsing.

* Suppress G70x in CLI subcommands cmd/{backup,cleanup,import,remap}.go:
  all four issue HTTP requests against operator-supplied RemarkURL/CLI
  flags, never user input. Each suppression carries a one-line reason.

* Suppress G122 in image fs_store cleanup walk: staging directory tree
  is server-only, no untrusted symlinks land there.

2026-04-18 02:32:31 -05:00

..

admin

add tests for admin Store and DataService

2023-11-04 12:49:40 -05:00

engine

test(store): use time.UTC in test fixtures to be timezone-agnostic

2026-04-17 19:38:11 -05:00

image

chore(lint): cap multipart upload size and suppress remaining gosec G70x

2026-04-18 02:32:31 -05:00

service

fix(ssrf): apply ssrf-safe transport to TitleExtractor

2026-04-18 02:32:31 -05:00

comment_test.go

test(store): use time.UTC in test fixtures to be timezone-agnostic

2026-04-17 19:38:11 -05:00

comment.go

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00

formatter_test.go

test(store): use time.UTC in test fixtures to be timezone-agnostic

2026-04-17 19:38:11 -05:00

formatter.go

Automatic fix of errors reported by golangci-lint v2

2025-03-24 22:46:43 +01:00

user_test.go

replace errors package with fmt.Errorf

2022-04-26 00:25:09 -05:00

user.go

replace numbers with proper HTTP status codes in tests

2022-04-17 19:42:45 -05:00