Cosmin Cojocar ed3f51e663 Add more types to templates rule ...

Add additional types such as CSS, JSStr and Srcset to the template rule.
These types are marked as a security risk in the godoc
https://pkg.go.dev/html/template.

Signed-off-by: Cosmin Cojocar <cosmin@cojocar.ch>

2024-05-28 10:39:33 +02:00

..

archive.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

bind.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

blocklist.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

decompression-bomb.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

directory-traversal.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

errors.go

Extract the issue in its own package

2023-02-16 09:45:28 +01:00

fileperms_test.go

fileperms: bitwise permission comparison (#883)

2022-10-20 08:48:40 +02:00

fileperms.go

Catch os.ModePerm permissions in os.WriteFile

2024-05-14 15:33:23 +02:00

hardcoded_credentials.go

fix(hardcoded): remove duplicated Stripe API Key

2024-02-13 10:02:03 +01:00

http_serve.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

implicit_aliasing.go

Ignore 'implicit memory aliasing' rule for Go 1.22+

2024-03-04 10:24:32 +01:00

integer_overflow.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

math_big_rat.go

Extract the issue in its own package

2023-02-16 09:45:28 +01:00

pprof.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

rand.go

Add support for math/rand/v2 added in Go 1.22

2024-03-07 16:33:18 +01:00

readfile.go

Add filepath.EvalSymlinks to clean functions in rule G304

2024-05-13 17:19:29 +02:00

rsa.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

rulelist.go

Add a new rule which detects when a file is created with os.Create but the configured permissions are less than 0666

2023-09-25 13:24:34 +02:00

rules_suite_test.go

Update to ginkgo v2 (#753)

2022-01-03 18:11:35 +01:00

rules_test.go

Add a new rule to detect integer overflow on integer types conversion

2024-05-27 13:03:01 +02:00

slowloris.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

sql.go

fix: correctly identify infixed concats as potential SQL injections (#987)

2023-07-25 17:13:07 +02:00

ssh.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

ssrf.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

subproc.go

Fix typos in comments, vars and tests

2023-05-30 08:26:41 +02:00

tempfiles.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

templates.go

Add more types to templates rule

2024-05-28 10:39:33 +02:00

tls_config.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00

tls.go

Extract the issue in its own package

2023-02-16 09:45:28 +01:00

unsafe.go

Update the list of unsafe functions detected by the unsafe rule (#1033)

2023-10-10 09:47:36 +02:00

weakcrypto.go

Fix some linting warnings

2023-03-20 10:25:45 +01:00