You are now the owner of this repo.

umputun / remark42
85%
master: 85%

LAST BUILD BRANCH: refs/tags/backend/v1.16.0
DEFAULT BRANCH: master
Repo Added
Token eqCnozHBf54UGZ8kokrZbOvkEkhZY23aj regen
Build 1639 Last
Files 52
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH refs/tags/backend/v1.16.0
branch: SELECT
CHANGE BRANCH
x
Sync Branches

coverage: 84.582% (+0.03%) from 84.555%
Relevant lines Covered
7504 RELEVANT LINES 6347 COVERED LINES
34.77 HITS PER LINE
Source Files on master

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
26305153257 refs/tags/backend/v1.16.0 chore(release): build binary artifacts with GoReleaser (#2070) replace the Docker artifact build with GoReleaser config and a tag release workflow. Keep local artifact builds snapshot-only and clean generated frontend embed files after release runs. push web-flow github
84.58
26305145072 refs/tags/v1.16.0 chore(release): build binary artifacts with GoReleaser (#2070) replace the Docker artifact build with GoReleaser config and a tag release workflow. Keep local artifact builds snapshot-only and clean generated frontend embed files after release runs. push web-flow github
84.58
26203935339 master fix(security): reject non-image content-types in image proxy and /picture/ to prevent stored XSS (#2067) * fix(security): reject non-image content-types in image proxy and /picture/ to prevent stored XSS The /api/v1/img proxy and /api/v1/picture... push web-flow github
84.55
26203772393 fix-image-proxy-xss-content-type-spoofing fix(security): set Cache-Control: no-store on image-proxy error paths, sync stale route comment Addresses two review comments on #2067: 1. Cache-Control: max-age=2592000 and Etag were set before the load/download/validation block, so 404/400/... Pull #2067 paskal github
84.58
26203356486 fix-image-proxy-xss-content-type-spoofing fix(security): reject non-image content-types in image proxy and /picture/ to prevent stored XSS The /api/v1/img proxy and /api/v1/picture/{user}/{id} endpoints emitted http.DetectContentType on the served bytes as the response Content-Type. A co... Pull #2067 paskal github
84.57
26202461678 master fix(image): reject decompression-bomb dimensions before raster decode readAndValidateImage caps the byte size of incoming images but the resize() helper that follows still called image.Decode unconditionally, allocating pixel memory proportional ... push umputun github
84.27
26199712850 fix-image-decompression-bomb fix(image): reject decompression-bomb dimensions before raster decode readAndValidateImage caps the byte size of incoming images but the resize() helper that follows still called image.Decode unconditionally, allocating pixel memory proportional ... Pull #2064 paskal github
84.27
26199364928 master chore(deps): bump go modules in backend and example Backend (backend/go.mod): - github.com/go-pkgz/auth/v2 v2.1.2 → v2.1.4 - github.com/klauspost/compress v1.18.5 → v1.18.6 - github.com/redis/go-redis/v9 v9.18.0 → v9.19.0 - github.com/slack-go/sl... push umputun github
84.25
26198800920 chore-deps-bump-go-modules chore(deps): bump go modules in backend and example Backend (backend/go.mod): - github.com/go-pkgz/auth/v2 v2.1.2 → v2.1.4 - github.com/klauspost/compress v1.18.5 → v1.18.6 - github.com/redis/go-redis/v9 v9.18.0 → v9.19.0 - github.com/slack-go/sl... Pull #2065 paskal github
84.25
26198482866 fix-image-decompression-bomb fix(image): reject decompression-bomb dimensions before raster decode readAndValidateImage caps the byte size of incoming images but the resize() helper that follows still called image.Decode unconditionally, allocating pixel memory proportional ... Pull #2064 paskal github
84.27
See All Builds (1596)