Skip to content

Conversation

@jbrockopp
Copy link
Contributor

@jbrockopp jbrockopp commented May 22, 2022

This change addresses all code scanning alerts flagged by CodeQL:

https://github.com/go-vela/server/security/code-scanning

To accomplish this, some helper functions were added to the util package that strip newlines and HTML escape strings.

Before

https://github.com/go-vela/server/security/code-scanning?query=is%3Aopen+branch%3Amaster

After

https://github.com/go-vela/server/security/code-scanning?query=is%3Aopen+pr%3A645+

@jbrockopp jbrockopp added the bug Indicates a bug label May 22, 2022
@jbrockopp jbrockopp self-assigned this May 22, 2022
@codecov
Copy link

codecov bot commented May 22, 2022

Codecov Report

Merging #645 (d72e057) into master (24d566d) will increase coverage by 0.00%.
The diff coverage is 26.08%.

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #645   +/-   ##
=======================================
  Coverage   55.37%   55.37%           
=======================================
  Files         195      195           
  Lines       15829    15830    +1     
=======================================
+ Hits         8765     8766    +1     
  Misses       6695     6695           
  Partials      369      369           
Impacted Files Coverage Δ
api/authenticate.go 0.00% <0.00%> (ø)
api/badge.go 0.00% <0.00%> (ø)
api/deployment.go 0.00% <0.00%> (ø)
api/hook.go 0.00% <0.00%> (ø)
api/login.go 0.00% <0.00%> (ø)
api/repo.go 0.00% <0.00%> (ø)
api/secret.go 0.00% <0.00%> (ø)
api/user.go 0.00% <0.00%> (ø)
router/middleware/executors/executors.go 3.70% <ø> (ø)
router/middleware/perm/perm.go 46.20% <0.00%> (ø)
... and 8 more

@jbrockopp jbrockopp marked this pull request as ready for review May 23, 2022 15:22
@jbrockopp jbrockopp requested a review from a team as a code owner May 23, 2022 15:22
Copy link
Contributor

@kneal kneal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🐬

@wass3r wass3r merged commit 8db1ffd into master May 25, 2022
@wass3r wass3r deleted the fix/code/scanning/alerts branch May 25, 2022 00:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Indicates a bug

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants