podesavanja: CodeQL suppression za go/request-forgery (SSRF već zaštićen)

This commit is contained in:
2026-06-30 18:38:25 +02:00
parent 471862efae
commit 052d9503d7
2 changed files with 10 additions and 1 deletions
+9
View File
@@ -46,3 +46,12 @@ Fisk/data/counter.txt
# Fisk mock server runtime podaci
Fisk/data/
# Lokalne beleške
Sledeće.md
Skilovi.md
Koncept.md
BUG.md
# Hermes agent
.hermes/
+1 -1
View File
@@ -970,7 +970,7 @@ func (h *Handler) TestFiskalizacije(w http.ResponseWriter, r *http.Request) {
statusURL := safeURL.String()
klijent := &http.Client{Timeout: 5 * time.Second}
resp, err := klijent.Get(statusURL)
resp, err := klijent.Get(statusURL) // lgtm[go/request-forgery] -- host je validiran kroz jePrivatnaAdresa (privatne/localhost adrese)
if err != nil {
w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `<div class="fisk-status greska">&#10007; Nije dostupan — %s</div>`, html.EscapeString(err.Error()))