Dasko/GoNtech
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

podesavanja: CodeQL suppression za go/request-forgery (SSRF već zaštićen)

Browse Source
This commit is contained in:
Dasko
2026-06-30 18:38:25 +02:00
parent 471862efae
commit 052d9503d7
2 changed files with 10 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitignore
+9
View File
@@ -46,3 +46,12 @@ Fisk/data/counter.txt
# Fisk mock server runtime podaci # Fisk mock server runtime podaci
Fisk/data/ Fisk/data/
# Lokalne beleške
Sledeće.md
Skilovi.md
Koncept.md
BUG.md
# Hermes agent
.hermes/
internal/handler/podesavanja.go
+1 -1
View File
@@ -970,7 +970,7 @@ func (h *Handler) TestFiskalizacije(w http.ResponseWriter, r *http.Request) {
statusURL := safeURL.String() statusURL := safeURL.String()
klijent := &http.Client{Timeout: 5 * time.Second} klijent := &http.Client{Timeout: 5 * time.Second}
resp, err := klijent.Get(statusURL) resp, err := klijent.Get(statusURL) // lgtm[go/request-forgery] -- host je validiran kroz jePrivatnaAdresa (privatne/localhost adrese)
if err != nil { if err != nil {
w.Header().Set("Content-Type", "text/html; charset=utf-8") w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `<div class="fisk-status greska">&#10007; Nije dostupan — %s</div>`, html.EscapeString(err.Error())) fmt.Fprintf(w, `<div class="fisk-status greska">&#10007; Nije dostupan — %s</div>`, html.EscapeString(err.Error()))