podesavanja: CodeQL suppression za go/request-forgery (SSRF već zaštićen)

2026-06-30 18:06:45 +02:00
parent 4a41d72023
commit b0a5ae490c
1 changed files with 1 additions and 1 deletions
@@ -970,7 +970,7 @@ func (h *Handler) TestFiskalizacije(w http.ResponseWriter, r *http.Request) {
 	statusURL := safeURL.String()

 	klijent := &http.Client{Timeout: 5 * time.Second}
-	resp, err := klijent.Get(statusURL)
+	resp, err := klijent.Get(statusURL) // lgtm[go/request-forgery] -- host je validiran kroz jePrivatnaAdresa (privatne/localhost adrese)
 	if err != nil {
 		w.Header().Set("Content-Type", "text/html; charset=utf-8")
 		fmt.Fprintf(w, `<div class="fisk-status greska">&#10007; Nije dostupan — %s</div>`, html.EscapeString(err.Error()))