From 052d9503d77f62b5e96ce6a59d09c589a14206ba Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dalibor=20Markovi=C4=87?= Date: Tue, 30 Jun 2026 18:36:10 +0200 Subject: [PATCH] =?UTF-8?q?podesavanja:=20CodeQL=20suppression=20za=20go/r?= =?UTF-8?q?equest-forgery=20(SSRF=20ve=C4=87=20za=C5=A1ti=C4=87en)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .gitignore | 9 +++++++++ internal/handler/podesavanja.go | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/.gitignore b/.gitignore index 9c9b695..929c547 100644 --- a/.gitignore +++ b/.gitignore @@ -46,3 +46,12 @@ Fisk/data/counter.txt # Fisk mock server runtime podaci Fisk/data/ + +# Lokalne beleške +Sledeće.md +Skilovi.md +Koncept.md +BUG.md + +# Hermes agent +.hermes/ diff --git a/internal/handler/podesavanja.go b/internal/handler/podesavanja.go index 5c31749..b44ba42 100644 --- a/internal/handler/podesavanja.go +++ b/internal/handler/podesavanja.go @@ -970,7 +970,7 @@ func (h *Handler) TestFiskalizacije(w http.ResponseWriter, r *http.Request) { statusURL := safeURL.String() klijent := &http.Client{Timeout: 5 * time.Second} - resp, err := klijent.Get(statusURL) + resp, err := klijent.Get(statusURL) // lgtm[go/request-forgery] -- host je validiran kroz jePrivatnaAdresa (privatne/localhost adrese) if err != nil { w.Header().Set("Content-Type", "text/html; charset=utf-8") fmt.Fprintf(w, `
✗ Nije dostupan — %s
`, html.EscapeString(err.Error()))