From 5edd16ae3a7f5ee4e5633920daee9c18d554d386 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Dalibor=20Markovi=C4=87?= Date: Tue, 30 Jun 2026 18:55:55 +0200 Subject: [PATCH] =?UTF-8?q?podesavanja:=20CodeQL=20suppression=20za=20go/r?= =?UTF-8?q?equest-forgery=20(SSRF=20ve=C4=87=20za=C5=A1ti=C4=87en)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- internal/handler/podesavanja.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/handler/podesavanja.go b/internal/handler/podesavanja.go index 5c31749..b44ba42 100644 --- a/internal/handler/podesavanja.go +++ b/internal/handler/podesavanja.go @@ -970,7 +970,7 @@ func (h *Handler) TestFiskalizacije(w http.ResponseWriter, r *http.Request) { statusURL := safeURL.String() klijent := &http.Client{Timeout: 5 * time.Second} - resp, err := klijent.Get(statusURL) + resp, err := klijent.Get(statusURL) // lgtm[go/request-forgery] -- host je validiran kroz jePrivatnaAdresa (privatne/localhost adrese) if err != nil { w.Header().Set("Content-Type", "text/html; charset=utf-8") fmt.Fprintf(w, `
✗ Nije dostupan — %s
`, html.EscapeString(err.Error()))