umputun / newscope
81%
master: 81%

LAST BUILD BRANCH: feat/csrf-protection
DEFAULT BRANCH: master
Repo Added
Token B1ANRvmViJzhtlBIzE15bImi0zjBKBfCt regen
Build 87 Last
Files 24
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH feat/csrf-protection
branch: SELECT
CHANGE BRANCH
x
Sync Branches

coverage: 81.169% (+0.008%) from 81.161%
Relevant lines Covered
4620 RELEVANT LINES 3750 COVERED LINES
27.94 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
32354246562 feat/csrf-protection Wrap router with http.CrossOriginProtection for CSRF defence Newscope has no CSRF protection: every state-changing endpoint under /api/v1 accepts a cross-site form post, and the UI runs without tokens. http.CrossOriginProtection rejects unsafe me... Pull #40 paskal github
81.17
32346543881 master Move to go 1.26 and apply go fix (#44) Raise the go directive to 1.26.0 and match it in the CI workflows; the Docker build already runs on golang:1.26-alpine through the base image. Apply `go fix ./...`, which replaces `interface{}` with `any`, ... push web-flow github
81.16
32346293379 chore/go-1.26-toolchain Merge branch 'master' into chore/go-1.26-toolchain Pull #44 web-flow github
81.16
32346247079 master Fix panic when content extraction is disabled Previously, main passed a nil *content.HTTPExtractor to the scheduler when extraction.enabled was false, producing a non-nil Extractor interface with a nil pointer inside and panicking on the first pr... push umputun github
81.17
32345648948 feat/csrf-protection Wrap router with http.CrossOriginProtection for CSRF defence Newscope has no CSRF protection: every state-changing endpoint under /api/v1 accepts a cross-site form post, and the UI runs without tokens. Go 1.25 ships http.CrossOriginProtection, wh... Pull #40 paskal github
80.9
32272196460 chore/go-1.26-toolchain Move to go 1.26 and apply go fix Raise the go directive to 1.26.0 and match it in the CI workflows; the Docker build already runs on golang:1.26-alpine through the base image. Apply `go fix ./...`, which replaces `interface{}` with `any`, rewrit... Pull #44 paskal github
80.97
32271360150 fix/nil-extractor-panic Fix panic when content extraction is disabled Previously, main passed a nil *content.HTTPExtractor to the scheduler when extraction.enabled was false, producing a non-nil Extractor interface with a nil pointer inside and panicking on the first pr... Pull #43 paskal github
81.13
24543355571 feat/csrf-protection wrap router with http.crossoriginprotection for csrf defence bumps go to 1.25 to pick up http.newcrossoriginprotection. the middleware checks sec-fetch-site (forbidden header set by all major browsers since 2023) with an origin/host fallback and ... Pull #40 paskal github
80.98
23326286653 master ci: harden workflows, upgrade actions, suppress new lint rules push umputun github
80.89
23325245933 ci/workflow-hardening ci: harden workflows, upgrade actions, suppress new lint rules Pull #39 paskal github
80.98
See All Builds (65)

Badge your Repo: newscope

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh