1
94%
master: 94%

Ran 12 Mar 2026 03:27PM UTC

Files 74

Run time 3s

Badge

Embed ▾

Committed 12 Mar 2026 03:26PM UTC coverage: 93.423% (+0.005%) from 93.418%

Job # 23009725087.1

Build Type

push

github

Committed by

alexferl

Commit Message

feat: add path traversal protection to static file handler

Add check for ".." in raw URL path before cleaning. Blocks traversal
attempts early with logging. Uses path.Clean (not filepath.Clean) for
URL paths. fs.FS enforces this via fs.ValidPath at Open time as
defense in depth. Includes test for encoded traversal attempts.

Signed-off-by: alexferl <me@alexferl.com>

Coverage Stats

8367 of 8956 relevant lines covered (93.42%)

45.26 hits per line

alexferl / zerohttp / 23009725087 / 1
94%
master: 94%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 23009725087.1

alexferl / zerohttp / 23009725087 / 1 94% master: 94%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 23009725087.1

alexferl / zerohttp / 23009725087 / 1
94%
master: 94%

README BADGES
x