35883056141
92%

Ran 23 Sep 2026 03:39PM UTC

Jobs 4

Files 40

Run time 1min

Badge

Embed ▾

Committed 23 Sep 2026 03:36PM UTC coverage: 92.559% (-0.002%) from 92.561%

Build # 35883056141

Build Type

push

github

Committed by

inhere

Commit Message

fix(ci): clear the CodeQL reflected-XSS alert on the response writer

The alert is the same false positive that was dismissed as #9 in May, reopened
with a new fingerprint. CodeQL models `chi.URLParam`, `mux.Vars` and
`*http.Request.URL` as request sources and any in-repo http.ResponseWriter
implementation as the sink, so every example/benchmark that echoes request data
gets reported against rux's response writer.

- _examples/serve: escape the reflected request path with `html.EscapeString`
  (a CodeQL sanitizer, so the flow dies at the source) and replace the
  v1-style `{id:\d+}` route, whose constraint v2 silently ignores
- .github/codeql/codeql-config.yml: exclude the `_benchmarks/` comparison
  fixtures. They echo a path parameter on purpose (already hardened with
  text/plain + nosniff at runtime) and escaping only the flagged files would
  skew the published router comparison. Wired into the CodeQL workflow via
  config-file
- _examples/go.mod: bump goutil to v0.8.0 and refresh go.sum, so the examples
  module builds again (`go run ./_examples/serve` failed with "updates to
  go.mod needed" before this)

Coverage Stats

3060 of 3306 relevant lines covered (92.56%)

3.91 hits per line

Jobs

ID	Job ID	Ran	Files	Coverage
1	Go-1.23 - 35883056141.1	23 Sep 2026 03:39PM UTC	40	91.63	GitHub Action Run
2	Go-1.25 - 35883056141.2	23 Sep 2026 03:39PM UTC	40	91.57	GitHub Action Run
3	Go-1.24 - 35883056141.3	23 Sep 2026 03:39PM UTC	40	91.57	GitHub Action Run
4	Go-stable - 35883056141.4	23 Sep 2026 03:39PM UTC	40	90.89	GitHub Action Run

gookit / rux / 35883056141
92%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 35883056141

gookit / rux / 35883056141 92%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Jobs

Source Files on build 35883056141

gookit / rux / 35883056141
92%

README BADGES
x