• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

umputun / remark42 / 22518679443
84%
master: 84%

Build:
Build:
LAST BUILD BRANCH: fix/security-ipv6-ssrf
DEFAULT BRANCH: master
Ran 28 Feb 2026 10:12AM UTC
Jobs 1
Files 50
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

28 Feb 2026 10:09AM UTC coverage: 84.394%. First build
22518679443

Pull #2016

github

umputun
fix: IPv6 address truncation and image proxy SSRF vulnerabilities

Replace strings.Split(RemoteAddr, ":") with net.SplitHostPort for correct
IPv6 address extraction in vote deduplication and comment IP tracking.

Harden image proxy: add SSRF-safe transport blocking private/reserved IPs
at connection time with DNS rebinding protection, sanitize error messages
to prevent information leakage, add response size limit via io.LimitReader.

Fix shadowed error variables in BlockedUsers, SetTitle, and Delete methods.
Exclude gosec taint analysis false positives at linter config level.
Pull Request #2016: fix: IPv6 address truncation and image proxy SSRF vulnerabilities

71 of 96 new or added lines in 7 files covered. (73.96%)

6165 of 7305 relevant lines covered (84.39%)

34.74 hits per line

New Missed Lines in Diff

Lines Coverage ∆ File
3
92.03
backend/app/store/service/service.go
6
64.29
backend/app/store/service/tree.go
16
80.45
backend/app/rest/proxy/image.go
Jobs
ID Job ID Ran Files Coverage
1 22518679443.1 28 Feb 2026 10:12AM UTC 50
84.39
GitHub Action Run
Source Files on build 22518679443
  • Tree
  • List 50
  • Changed 0
  • Source Changed 0
  • Coverage Changed 0
Coverage ∆ File Lines Relevant Covered Missed Hits/Line
  • Back to Repo
  • Pull Request #2016
  • Delete
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc