Dmitry VerkhoturovandUmputun a96bddcb8d chore(lint): suppress gosec G70x false positives in admin/CLI paths ...

CI's golangci-lint v2.10.1 (newer rule set than my local 2.11.4) flags
four G70x cases the previous run missed. All are false positives:
backup.go and cleanup.go drive HTTP requests against the operator's own
RemarkURL from CLI flags (not user input); migrator.go removes a temp
file whose name was returned by os.CreateTemp (server-controlled). Add
targeted //nolint:gosec comments naming the reason at each site.

2026-04-18 02:32:31 -05:00

..

testdata

add apple bad key test, fix key location

2023-01-04 03:54:38 -06:00

web

move static web files from rakyll/statik to go:embed

2022-08-03 15:41:02 -05:00

avatar_test.go

migrate to go-pkgz/auth/v2

2024-12-09 01:54:03 +00:00

avatar.go

migrate to go-pkgz/auth/v2

2024-12-09 01:54:03 +00:00

backup_test.go

add meaningful error for lack of auth on import, remap and backup

2024-01-28 12:16:24 -06:00

backup.go

chore(lint): suppress gosec G70x false positives in admin/CLI paths

2026-04-18 02:32:31 -05:00

cleanup_test.go

refactor: modernise Go code with go fix and manual improvements (#2027)

2026-03-25 16:42:37 -05:00

cleanup.go

chore(lint): suppress gosec G70x false positives in admin/CLI paths

2026-04-18 02:32:31 -05:00

cmd_test.go

Replace "(Not)Nil" test checks for errors with with "(No)Error" (#503)

2019-12-29 15:42:39 -06:00

cmd.go

fix: IPv6 address truncation and image proxy SSRF vulnerabilities

2026-02-28 04:13:07 -06:00

import_test.go

add meaningful error for lack of auth on import, remap and backup

2024-01-28 12:16:24 -06:00

import.go

move common options to cmd.go

2022-07-25 12:42:13 -05:00

remap_test.go

add meaningful error for lack of auth on import, remap and backup

2024-01-28 12:16:24 -06:00

remap.go

move common options to cmd.go

2022-07-25 12:42:13 -05:00

restore_test.go

replace numbers with proper HTTP status codes in tests

2022-04-17 19:42:45 -05:00

restore.go

move common options to cmd.go

2022-07-25 12:42:13 -05:00

server_test.go

fix(api): require explicit ?site= in matchSiteID middleware

2026-04-17 19:35:50 -05:00

server.go

fix(ssrf): apply ssrf-safe transport to TitleExtractor

2026-04-18 02:32:31 -05:00