sneak b580dbbd2c fix: resolve all 22 gosec G710 open-redirect findings ...

Route every app redirect in internal/handlers/app.go through a new
redirectToApp helper that parses the app ID with ulid.ParseStrict
(404 on failure), re-serializes it, and path-escapes it before
building the /apps/<id> target, so no unvalidated request input can
reach http.Redirect. Also converts the equivalent unflagged redirect
in HandleAppCreate for consistency.

make lint under golangci-lint 2.12.2 drops from 47 findings to 25
(remaining: 1 gosec G703 tracked in #177, 24 goconst tracked in
#178). make test and make fmt-check pass unchanged.

Closes #176

2026-08-07 16:58:10 +00:00

..

config

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

database

Move schema_migrations table creation into 000.sql with INTEGER version column (#172)

2026-03-30 21:40:16 +02:00

docker

feat: CPU/memory resource limits per app (#165)

2026-03-20 06:44:48 +01:00

globals

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

handlers

fix: resolve all 22 gosec G710 open-redirect findings

2026-08-07 16:58:10 +00:00

healthcheck

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

logger

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

middleware

fix: resolve all 47 noctx lint findings in tests

2026-08-07 16:47:16 +00:00

models

feat: CPU/memory resource limits per app (#165)

2026-03-20 06:44:48 +01:00

server

feat: monolithic env var editing with bulk save (#158)

2026-03-11 12:06:56 +01:00

service

fix: resolve all 47 noctx lint findings in tests

2026-08-07 16:47:16 +00:00

ssh

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00