umputun / newscope

81%

master: 81%

LAST BUILD ON BRANCH feat/csrf-protection

branch: SELECT

CHANGE BRANCH

x

Sync Branches

• No branch selected
• add-claude-github-actions-1754853952019
• ci/workflow-hardening
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/setup-go-6
• dependabot/github_actions/golangci/golangci-lint-action-9
• dependabot/go_modules/github.com/go-pkgz/rest-1.20.4
• dependabot/go_modules/github.com/go-pkgz/rest-1.20.6
• dependabot/go_modules/github.com/sashabaranov/go-openai-1.40.5
• dependabot/go_modules/github.com/sashabaranov/go-openai-1.41.0
• dependabot/go_modules/github.com/sashabaranov/go-openai-1.41.1
• dependabot/go_modules/github.com/sashabaranov/go-openai-1.41.2
• dependabot/go_modules/github.com/stretchr/testify-1.11.1
• dependabot/go_modules/golang.org/x/crypto-0.45.0
• dependabot/go_modules/golang.org/x/net-0.42.0
• dependabot/go_modules/golang.org/x/net-0.43.0
• dependabot/go_modules/golang.org/x/net-0.44.0
• dependabot/go_modules/golang.org/x/net-0.46.0
• dependabot/go_modules/golang.org/x/net-0.48.0
• dependabot/go_modules/golang.org/x/sync-0.16.0
• dependabot/go_modules/golang.org/x/sync-0.17.0
• dependabot/go_modules/golang.org/x/sync-0.19.0
• dependabot/go_modules/modernc.org/sqlite-1.38.1
• feat/csrf-protection
• feat/summary-validation-theme-toggle
• feature/ai-classification-improvements
• feature/multi-user-auth
• fix_docker_compose
• master

Build # 24543355571

Build Type

Pull #40

github

Committed by paskal

Commit Message

wrap router with http.crossoriginprotection for csrf defence

bumps go to 1.25 to pick up http.newcrossoriginprotection. the
middleware checks sec-fetch-site (forbidden header set by all major
browsers since 2023) with an origin/host fallback and rejects
cross-origin state-changing requests at the http layer.

ci and release workflows updated to go 1.25 to match go.mod.

Pull Request Pull Request #40: Wrap router with http.CrossOriginProtection for CSRF defence

Coverage Stats

1 of 1 new or added line in 1 file covered. (100.0%)

3722 of 4596 relevant lines covered (80.98%)

27.93 hits per line