• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

umputun / remark42 / 22267151693
84%
master: 84%

Build:
Build:
LAST BUILD BRANCH: fix/security-ipv6-ssrf
DEFAULT BRANCH: master
Ran 22 Feb 2026 12:25AM UTC
Jobs 1
Files 50
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

22 Feb 2026 12:22AM UTC coverage: 84.409% (-0.02%) from 84.432%
22267151693

Pull #2008

github

paskal
Add X-Content-Type-Options and Referrer-Policy security headers

Add two missing security headers to the existing securityHeadersMiddleware:

- X-Content-Type-Options: nosniff — prevents browsers from MIME-sniffing
  responses away from the declared Content-Type, stopping e.g. a
  user-uploaded image from being reinterpreted as executable HTML/JS

- Referrer-Policy: strict-origin-when-cross-origin — limits URL information
  leaked in the Referer header on cross-origin requests to just the origin
  (no path), and sends nothing at all on HTTPS-to-HTTP downgrades
Pull Request #2008: Add X-Content-Type-Options and Referrer-Policy security headers

6107 of 7235 relevant lines covered (84.41%)

34.75 hits per line

Uncovered Existing Lines

Lines Coverage ∆ File
2
87.88
-6.06% backend/app/providers/telegram.go
Jobs
ID Job ID Ran Files Coverage
1 22267151693.1 22 Feb 2026 12:25AM UTC 50
84.41
GitHub Action Run
Source Files on build 22267151693
  • Tree
  • List 50
  • Changed 2
  • Source Changed 0
  • Coverage Changed 2
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Pull Request #2008
  • PR Base - master (#22027769028)
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc