sneak b580dbbd2c fix: resolve all 22 gosec G710 open-redirect findings ...

Route every app redirect in internal/handlers/app.go through a new
redirectToApp helper that parses the app ID with ulid.ParseStrict
(404 on failure), re-serializes it, and path-escapes it before
building the /apps/<id> target, so no unvalidated request input can
reach http.Redirect. Also converts the equivalent unflagged redirect
in HandleAppCreate for consistency.

make lint under golangci-lint 2.12.2 drops from 47 findings to 25
(remaining: 1 gosec G703 tracked in #177, 24 goconst tracked in
#178). make test and make fmt-check pass unchanged.

Closes #176

2026-08-07 16:58:10 +00:00

..

api_test.go

fix: resolve all 47 noctx lint findings in tests

2026-08-07 16:47:16 +00:00

api.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

app_name_validation_test.go

Add server-side app name validation (closes #37)

2026-02-15 22:06:08 -08:00

app_name_validation.go

Add server-side app name validation (closes #37)

2026-02-15 22:06:08 -08:00

app.go

fix: resolve all 22 gosec G710 open-redirect findings

2026-08-07 16:58:10 +00:00

auth.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

dashboard.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

export_test.go

fix: resolve lint issues in handlers and middleware

2026-02-20 03:35:44 -08:00

handlers_test.go

fix: resolve all 47 noctx lint findings in tests

2026-08-07 16:47:16 +00:00

handlers.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

healthcheck.go

Initial commit with server startup infrastructure

2025-12-29 15:46:03 +07:00

port_validation_test.go

fix: resolve all golangci-lint issues

2026-02-15 21:55:24 -08:00

render_template_test.go

fix: resolve all 47 noctx lint findings in tests

2026-08-07 16:47:16 +00:00

repo_url_validation_test.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

repo_url_validation.go

fix: resolve lint issues in handlers and middleware

2026-02-20 03:35:44 -08:00

resource_limits_test.go

feat: CPU/memory resource limits per app (#165)

2026-03-20 06:44:48 +01:00

sanitize_test.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

sanitize.go

feat: sanitize container log output beyond Content-Type

2026-02-20 02:54:16 -08:00

setup.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

tail_validation_test.go

fix: change module path to sneak.berlin/go/upaas (closes #143) (#149)

2026-03-01 23:22:18 +01:00

volume_validation_test.go

feat: edit existing env vars, labels, and volume mounts

2026-02-16 00:26:07 -08:00

webhook_events.go

feat: add webhook event history UI page (#164)

2026-03-10 18:53:58 +01:00

webhook.go

feat: add GitHub and GitLab webhook support (#170)

2026-03-22 00:46:10 +01:00