• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

stacklok / toolhive / 18969331103
51%

Build:
DEFAULT BRANCH: main
Ran 31 Oct 2025 10:14AM UTC
Jobs 1
Files 327
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

31 Oct 2025 10:08AM UTC coverage: 47.403% (+0.03%) from 47.376%
18969331103

push

github

web-flow
Add HTTP header validation to prevent injection (#2411)

Add ValidateHTTPHeaderName and ValidateHTTPHeaderValue functions to the
validation package to prevent CRLF injection and other header-based
attacks. These functions use golang.org/x/net/http/httpguts for RFC 7230
compliant validation, matching Go's own HTTP/2 implementation.

The validation checks for:
- CRLF injection attempts (\r\n)
- Control characters (null bytes, etc.)
- RFC 7230 token compliance for header names
- Length limits (256 bytes for names, 8KB for values)

22 of 22 new or added lines in 1 file covered. (100.0%)

5 existing lines in 2 files now uncovered.

20652 of 43567 relevant lines covered (47.4%)

22.19 hits per line

Uncovered Existing Lines

Lines Coverage ∆ File
2
81.62
0.0% pkg/transport/proxy/httpsse/http_proxy.go
3
96.5
-2.1% cmd/thv-operator/pkg/sources/git.go
Jobs
ID Job ID Ran Files Coverage
1 18969331103.1 31 Oct 2025 10:14AM UTC 327
47.4
GitHub Action Run
Source Files on build 18969331103
  • Tree
  • List 327
  • Changed 4
  • Source Changed 1
  • Coverage Changed 4
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Github Actions Build #18969331103
  • 7792dba7 on github
  • Prev Build on main (#18969324495)
  • Next Build on main (#18970043441)
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2025 Coveralls, Inc