umputun / remark42
85%
master: 85%

LAST BUILD BRANCH: docs-audit-fixes
DEFAULT BRANCH: master
Repo Added
Token eqCnozHBf54UGZ8kokrZbOvkEkhZY23aj regen
Build 1642 Last
Files 52
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH docs-audit-fixes
branch: SELECT
CHANGE BRANCH
x
Sync Branches

coverage: 84.582%. First build
Relevant lines Covered
7504 RELEVANT LINES 6347 COVERED LINES
34.75 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
26473236552 docs-audit-fixes fix: webhook template flag default override masking safe fallback Copilot flagged the audit's "real default" claim and was right. server.go:286 had default:"{\"text\": \"{{.Text}}\"}" — the literal, JSON-unsafe template that produces invalid JSON... Pull #2077 paskal github
84.58
26471582760 docs-audit-fixes fix: address parameter docs and --help text inconsistencies Audit findings from comparing site/src/docs/configuration/parameters/ against the backend flag tags. Docs (parameters/index.md): - image.bolt.file default was `/var/pictures.db` (absolu... Pull #2077 paskal github
84.58
26305153257 refs/tags/backend/v1.16.0 chore(release): build binary artifacts with GoReleaser (#2070) replace the Docker artifact build with GoReleaser config and a tag release workflow. Keep local artifact builds snapshot-only and clean generated frontend embed files after release runs. push web-flow github
84.58
26305145072 refs/tags/v1.16.0 chore(release): build binary artifacts with GoReleaser (#2070) replace the Docker artifact build with GoReleaser config and a tag release workflow. Keep local artifact builds snapshot-only and clean generated frontend embed files after release runs. push web-flow github
84.58
26203935339 master fix(security): reject non-image content-types in image proxy and /picture/ to prevent stored XSS (#2067) * fix(security): reject non-image content-types in image proxy and /picture/ to prevent stored XSS The /api/v1/img proxy and /api/v1/picture... push web-flow github
84.55
26203772393 fix-image-proxy-xss-content-type-spoofing fix(security): set Cache-Control: no-store on image-proxy error paths, sync stale route comment Addresses two review comments on #2067: 1. Cache-Control: max-age=2592000 and Etag were set before the load/download/validation block, so 404/400/... Pull #2067 paskal github
84.58
26203356486 fix-image-proxy-xss-content-type-spoofing fix(security): reject non-image content-types in image proxy and /picture/ to prevent stored XSS The /api/v1/img proxy and /api/v1/picture/{user}/{id} endpoints emitted http.DetectContentType on the served bytes as the response Content-Type. A co... Pull #2067 paskal github
84.57
26202461678 master fix(image): reject decompression-bomb dimensions before raster decode readAndValidateImage caps the byte size of incoming images but the resize() helper that follows still called image.Decode unconditionally, allocating pixel memory proportional ... push umputun github
84.27
26199712850 fix-image-decompression-bomb fix(image): reject decompression-bomb dimensions before raster decode readAndValidateImage caps the byte size of incoming images but the resize() helper that follows still called image.Decode unconditionally, allocating pixel memory proportional ... Pull #2064 paskal github
84.27
26199364928 master chore(deps): bump go modules in backend and example Backend (backend/go.mod): - github.com/go-pkgz/auth/v2 v2.1.2 → v2.1.4 - github.com/klauspost/compress v1.18.5 → v1.18.6 - github.com/redis/go-redis/v9 v9.18.0 → v9.19.0 - github.com/slack-go/sl... push umputun github
84.25
See All Builds (1598)