Dmitry VerkhoturovandUmputun 5ff5059db3 chore(lint): re-enable gosec G703/G704/G705 with targeted suppressions ...

Commit aca0cff3 silenced the path-traversal, SSRF and XSS taint rules
project-wide as "false positives" while fixing image-proxy SSRF. With
the path-traversal and TitleExtractor SSRF gaps now closed, restore the
rules so future regressions get flagged. The four genuine false positives
that remain (image proxy http.NewRequest, QR png Write, two RSS XML
Writes) get individual //nolint:gosec comments naming the reason.

2026-04-18 02:32:31 -05:00

..

cmd

fix(ssrf): apply ssrf-safe transport to TitleExtractor

2026-04-18 02:32:31 -05:00

migrator

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00

notify

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00

providers

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00

rest

chore(lint): re-enable gosec G703/G704/G705 with targeted suppressions

2026-04-18 02:32:31 -05:00

safehttp

fix(ssrf): apply ssrf-safe transport to TitleExtractor

2026-04-18 02:32:31 -05:00

store

fix(ssrf): apply ssrf-safe transport to TitleExtractor

2026-04-18 02:32:31 -05:00

templates

move templates from rakyll/statik to go:embed

2022-07-29 19:07:49 +02:00

main_test.go

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00

main.go

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00