1
84%
master: 84%

Ran 28 Feb 2026 10:12AM UTC

Files 50

Run time 1s

Badge

Embed ▾

Committed 28 Feb 2026 10:09AM UTC coverage: 84.394%. First build

Job # 22518679443.1

Build Type

Pull #2016

github

Committed by

umputun

Commit Message

fix: IPv6 address truncation and image proxy SSRF vulnerabilities

Replace strings.Split(RemoteAddr, ":") with net.SplitHostPort for correct
IPv6 address extraction in vote deduplication and comment IP tracking.

Harden image proxy: add SSRF-safe transport blocking private/reserved IPs
at connection time with DNS rebinding protection, sanitize error messages
to prevent information leakage, add response size limit via io.LimitReader.

Fix shadowed error variables in BlockedUsers, SetTitle, and Delete methods.
Exclude gosec taint analysis false positives at linter config level.

Pull Request Pull Request #2016: fix: IPv6 address truncation and image proxy SSRF vulnerabilities

Run Details

6165 of 7305 relevant lines covered (84.39%)

34.74 hits per line

umputun / remark42 / 22518679443 / 1
84%
master: 84%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 22518679443.1

umputun / remark42 / 22518679443 / 1 84% master: 84%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 22518679443.1

umputun / remark42 / 22518679443 / 1
84%
master: 84%

README BADGES
x