• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In
Recached

umputun / weblist
84%

Build:
DEFAULT BRANCH: master
Repo Added 17 Mar 2025 04:43AM UTC
Token tJv92swKEIf1mit2WDYHbqDdVSRy6VLIQ regen
Build 302 Last
Files 8
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH master
branch: SELECT
CHANGE BRANCH
x
Sync Branches
  • No branch selected
  • add-e2e-tests
  • add-shell-completions
  • ci/workflow-hardening
  • csv-table-rendering
  • dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.5
  • dependabot/go_modules/golang.org/x/crypto-0.45.0
  • feat/binary-content-detection
  • feat/csrf-stdlib
  • feat/recursive-mtime
  • feature-branding
  • feature-params-restructure
  • feature/add-direct-link-icon
  • feature/extract-file-modal-template
  • feature/file-preview
  • feature/fix-linting-and-improve-error-handling
  • feature/merge-file-templates
  • feature/multi-file-download
  • feature/refactor-file-handlers-clean
  • feature/sftp-improvements
  • feature/sort-cookies
  • feature/syntax-highlighting
  • file-upload
  • fix-auth-rate-limiting-and-template-caching
  • fix-responsive-design
  • fix/ci-security-hardening
  • fix/timing-attack-protection
  • fix/upload-temp-dir
  • json-api-feature
  • markdown-rendering
  • master
  • paskal/dependabot-disable-updates
  • redirect-directories
  • refactor/simplify-assets-handler
  • refs/tags/v0.1.0
  • refs/tags/v0.1.1
  • refs/tags/v0.1.2
  • refs/tags/v0.1.3
  • refs/tags/v0.1.4
  • refs/tags/v0.1.5
  • refs/tags/v0.10.3
  • refs/tags/v0.11.0
  • refs/tags/v0.12.0
  • refs/tags/v0.12.1
  • refs/tags/v0.13.0
  • refs/tags/v0.13.1
  • refs/tags/v0.13.2
  • refs/tags/v0.14.0
  • refs/tags/v0.14.1
  • refs/tags/v0.14.2
  • refs/tags/v0.14.3
  • refs/tags/v0.14.4
  • refs/tags/v0.15.0
  • refs/tags/v0.16.0
  • refs/tags/v0.17.0
  • refs/tags/v0.17.1
  • refs/tags/v0.17.2
  • refs/tags/v0.17.3
  • refs/tags/v0.18.0
  • refs/tags/v0.18.1
  • refs/tags/v0.19.0
  • refs/tags/v0.19.1
  • refs/tags/v0.19.2
  • refs/tags/v0.2.1
  • refs/tags/v0.2.2
  • refs/tags/v0.2.3
  • refs/tags/v0.2.4
  • refs/tags/v0.20.0
  • refs/tags/v0.20.1
  • refs/tags/v0.3.0
  • refs/tags/v0.3.1
  • refs/tags/v0.4.0
  • refs/tags/v0.4.1
  • refs/tags/v0.4.2
  • refs/tags/v0.5.0
  • refs/tags/v0.5.1
  • refs/tags/v0.6.0
  • refs/tags/v0.7.0
  • refs/tags/v0.8.0
  • refs/tags/v0.8.1
  • refs/tags/v0.8.2
  • refs/tags/v0.8.3
  • refs/tags/v0.8.4
  • refs/tags/v0.8.5
  • refs/tags/v0.9.0
  • refs/tags/v0.9.1
  • refs/tags/v0.9.2
  • refs/tags/v0.9.3
  • secure-auth-tokens
  • security-enhancements
  • style-improvements
  • test/docker-fix

17 Apr 2026 02:49AM UTC coverage: 83.709% (-0.2%) from 83.947%
24545149275

push

github

umputun
Replace hand-rolled CSRF tokens with http.CrossOriginProtection

Drop the per-request CSRF token cookie + hidden form field in favour
of Go 1.25's http.CrossOriginProtection middleware, which checks the
browser-set Sec-Fetch-Site header (with an Origin/Host fallback) and
needs no client-side instrumentation.

Net change: ~190 LoC removed.

4 of 4 new or added lines in 2 files covered. (100.0%)

2040 of 2437 relevant lines covered (83.71%)

22.85 hits per line

Relevant lines Covered
Build:
Build:
2437 RELEVANT LINES 2040 COVERED LINES
22.85 HITS PER LINE
Source Files on master
  • Tree
  • List 8
  • Changed 2
  • Source Changed 0
  • Coverage Changed 2
Coverage ∆ File Lines Relevant Covered Missed Hits/Line

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
24545149275 master Replace hand-rolled CSRF tokens with http.CrossOriginProtection Drop the per-request CSRF token cookie + hidden form field in favour of Go 1.25's http.CrossOriginProtection middleware, which checks the browser-set Sec-Fetch-Site header (with an O... push 17 Apr 2026 02:50AM UTC umputun github
83.71
24542749925 feat/csrf-stdlib Replace hand-rolled CSRF tokens with http.CrossOriginProtection Drop the per-request CSRF token cookie + hidden form field in favour of Go 1.25's http.CrossOriginProtection middleware, which checks the browser-set Sec-Fetch-Site header (with an O... Pull #45 17 Apr 2026 01:21AM UTC paskal github
83.71
23994109912 master Merge pull request #44 from umputun/dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.5 chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 push 05 Apr 2026 04:21AM UTC web-flow github
83.95
23932575848 dependabot/go_modules/github.com/go-jose/go-jose/v3-3.0.5 chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5 Bumps [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) from 3.0.4 to 3.0.5. - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](https://... Pull #44 03 Apr 2026 03:37AM UTC web-flow github
83.95
23131647631 master Merge pull request #43 from umputun/ci/workflow-hardening ci: harden workflows, add fetch-depth: 0 for goreleaser push 16 Mar 2026 06:57AM UTC web-flow github
83.95
23131558292 ci/workflow-hardening ci: harden workflows, add fetch-depth: 0 for goreleaser goreleaser needs full git history for changelog generation and tag resolution. See https://goreleaser.com/ci/actions/ Pull #43 16 Mar 2026 06:54AM UTC umputun github
83.95
22806705545 ci/workflow-hardening fix golangci-lint config: exclude new v2.11.1 rules Pull #42 07 Mar 2026 08:34PM UTC paskal github
83.95
22729519054 master Merge pull request #41 from paskal/fix/ci-security-hardening harden docker workflow against CI injection attacks push 05 Mar 2026 05:59PM UTC web-flow github
83.95
22596078952 fix/ci-security-hardening pass step outputs via env: in manifest push steps steps.tags.outputs.* values derived from head_branch were still interpolated via ${{ }} in run: blocks. Now passed via env:. Pull #41 02 Mar 2026 09:18PM UTC paskal github
83.95
22595729525 fix/ci-security-hardening harden docker workflow against CI injection attacks - add permissions: contents: read, packages: write (least privilege) - add event == 'push' guard to prevent workflow_run firing on PR events - use env: mapping for head_branch instead of direct ... Pull #41 02 Mar 2026 09:08PM UTC paskal github
83.95
See All Builds (252)

Badge your Repo: weblist

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.

Could not find badge in README.

Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh
  • Settings
  • Repo on GitHub
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc