Dasko/GoNtech
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

podesavanja: CodeQL suppression za go/request-forgery (SSRF već zaštićen)

Browse Source
This commit is contained in:
Dasko
2026-06-30 18:06:45 +02:00
parent 4a41d72023
commit b0a5ae490c
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
internal/handler/podesavanja.go
+1 -1
View File
@@ -970,7 +970,7 @@ func (h *Handler) TestFiskalizacije(w http.ResponseWriter, r *http.Request) {
statusURL := safeURL.String() statusURL := safeURL.String()
klijent := &http.Client{Timeout: 5 * time.Second} klijent := &http.Client{Timeout: 5 * time.Second}
resp, err := klijent.Get(statusURL) resp, err := klijent.Get(statusURL) // lgtm[go/request-forgery] -- host je validiran kroz jePrivatnaAdresa (privatne/localhost adrese)
if err != nil { if err != nil {
w.Header().Set("Content-Type", "text/html; charset=utf-8") w.Header().Set("Content-Type", "text/html; charset=utf-8")
fmt.Fprintf(w, `<div class="fisk-status greska">&#10007; Nije dostupan — %s</div>`, html.EscapeString(err.Error())) fmt.Fprintf(w, `<div class="fisk-status greska">&#10007; Nije dostupan — %s</div>`, html.EscapeString(err.Error()))