d7939bed70
- Implemented `useManualChallenge`, `useChallengePoll`, and `useManualChallengeMutations` hooks for managing manual DNS challenges. - Created tests for the `useManualChallenge` hooks to ensure correct fetching and mutation behavior. - Added `ManualDNSChallenge` component for displaying challenge details and actions. - Developed end-to-end tests for the Manual DNS Provider feature, covering provider selection, challenge UI, and accessibility compliance. - Included error handling tests for verification failures and network errors.
112 lines
6.0 KiB
Plaintext
112 lines
6.0 KiB
Plaintext
internal/api/handlers/encryption_handler_test.go:374:19: Error return value of `os.Unsetenv` is not checked (errcheck)
|
|
defer os.Unsetenv("CHARON_ENCRYPTION_KEY")
|
|
^
|
|
internal/api/handlers/encryption_handler_test.go:421:14: Error return value of `os.Unsetenv` is not checked (errcheck)
|
|
os.Unsetenv("CHARON_ENCRYPTION_KEY")
|
|
^
|
|
internal/api/handlers/encryption_handler_test.go:468:19: Error return value of `os.Unsetenv` is not checked (errcheck)
|
|
defer os.Unsetenv("CHARON_ENCRYPTION_KEY")
|
|
^
|
|
internal/api/handlers/encryption_handler_test.go:702:11: Error return value of `os.Setenv` is not checked (errcheck)
|
|
os.Setenv("CHARON_ENCRYPTION_KEY", currentKey)
|
|
^
|
|
internal/api/handlers/encryption_handler_test.go:753:11: Error return value of `os.Setenv` is not checked (errcheck)
|
|
os.Setenv("CHARON_ENCRYPTION_KEY", wrongKey)
|
|
^
|
|
internal/api/handlers/encryption_handler_test.go:754:11: Error return value of `os.Setenv` is not checked (errcheck)
|
|
os.Setenv("CHARON_ENCRYPTION_KEY_NEXT", nextKey)
|
|
^
|
|
internal/api/handlers/pr_coverage_test.go:484:13: Error return value of `sqlDB.Close` is not checked (errcheck)
|
|
sqlDB.Close()
|
|
^
|
|
internal/api/handlers/pr_coverage_test.go:589:14: Error return value of `sqlDB.Close` is not checked (errcheck)
|
|
sqlDB.Close()
|
|
^
|
|
internal/api/handlers/pr_coverage_test.go:699:13: Error return value of `sqlDB.Close` is not checked (errcheck)
|
|
sqlDB.Close()
|
|
^
|
|
internal/api/handlers/security_handler_coverage_test.go:615:16: Error return value of `json.Unmarshal` is not checked (errcheck)
|
|
json.Unmarshal(w.Body.Bytes(), &tokenResp)
|
|
^
|
|
internal/api/handlers/security_handler_waf_test.go:194:16: Error return value of `json.Unmarshal` is not checked (errcheck)
|
|
json.Unmarshal(w.Body.Bytes(), &resp)
|
|
^
|
|
internal/api/handlers/security_handler_waf_test.go:363:16: Error return value of `json.Unmarshal` is not checked (errcheck)
|
|
json.Unmarshal(w.Body.Bytes(), &resp)
|
|
^
|
|
internal/api/handlers/additional_coverage_test.go:642:6: G302: Expect file permissions to be 0600 or less (gosec)
|
|
_ = os.Chmod(backupsDir, 0o555)
|
|
^
|
|
internal/api/handlers/additional_coverage_test.go:643:21: G302: Expect file permissions to be 0600 or less (gosec)
|
|
defer func() { _ = os.Chmod(backupsDir, 0o755) }()
|
|
^
|
|
internal/api/handlers/backup_handler_test.go:272:6: G302: Expect file permissions to be 0600 or less (gosec)
|
|
_ = os.Chmod(svc.BackupDir, 0o444)
|
|
^
|
|
internal/api/handlers/crowdsec_exec.go:34:15: G304: Potential file inclusion via variable (gosec)
|
|
data, err := os.ReadFile(cmdlinePath)
|
|
^
|
|
internal/api/handlers/crowdsec_exec.go:69:12: G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
if err := os.WriteFile(e.pidFile(configDir), []byte(strconv.Itoa(pid)), 0o644); err != nil {
|
|
^
|
|
internal/api/handlers/crowdsec_exec.go:84:12: G304: Potential file inclusion via variable (gosec)
|
|
b, err := os.ReadFile(pidFilePath)
|
|
^
|
|
internal/api/handlers/crowdsec_handler.go:356:12: G301: Expect directory permissions to be 0750 or less (gosec)
|
|
if err := os.MkdirAll(tmpPath, 0o755); err != nil {
|
|
^
|
|
internal/api/handlers/crowdsec_handler.go:380:12: G301: Expect directory permissions to be 0750 or less (gosec)
|
|
if err := os.MkdirAll(h.DataDir, 0o755); err != nil {
|
|
^
|
|
internal/api/handlers/crowdsec_handler.go:387:13: G304: Potential file inclusion via variable (gosec)
|
|
in, err := os.Open(dst)
|
|
^
|
|
internal/api/handlers/crowdsec_handler.go:568:12: G301: Expect directory permissions to be 0750 or less (gosec)
|
|
if err := os.MkdirAll(filepath.Dir(p), 0o755); err != nil {
|
|
^
|
|
internal/api/handlers/crowdsec_handler.go:572:12: G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
if err := os.WriteFile(p, []byte(payload.Content), 0o644); err != nil {
|
|
^
|
|
internal/api/handlers/crowdsec_handler.go:1519:12: G306: Expect WriteFile permissions to be 0600 or less (gosec)
|
|
if err := os.WriteFile(acquisPath, []byte(payload.Content), 0o644); err != nil {
|
|
^
|
|
internal/api/handlers/manual_challenge_handler.go:649:15: G115: integer overflow conversion int -> uint (gosec)
|
|
return uint(v)
|
|
^
|
|
internal/api/handlers/manual_challenge_handler.go:651:15: G115: integer overflow conversion int64 -> uint (gosec)
|
|
return uint(v)
|
|
^
|
|
internal/api/handlers/security_handler_rules_decisions_test.go:162:92: G115: integer overflow conversion uint -> int (gosec)
|
|
req = httptest.NewRequest(http.MethodDelete, "/api/v1/security/rulesets/"+strconv.Itoa(int(rs.ID)), http.NoBody)
|
|
^
|
|
internal/caddy/config.go:463:16: G602: slice index out of range (gosec)
|
|
host := hosts[i]
|
|
^
|
|
internal/crowdsec/hub_sync.go:1016:16: G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
if _, err := io.Copy(f, tr); err != nil {
|
|
^
|
|
internal/services/backup_service.go:316:12: G305: File traversal when extracting zip/tar archive (gosec)
|
|
fpath := filepath.Join(dest, f.Name)
|
|
^
|
|
internal/services/backup_service.go:345:12: G110: Potential DoS vulnerability via decompression bomb (gosec)
|
|
_, err = io.Copy(outFile, rc)
|
|
^
|
|
internal/services/uptime_service_test.go:58:13: G112: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (gosec)
|
|
server := &http.Server{
|
|
Handler: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusOK)
|
|
}),
|
|
}
|
|
internal/services/uptime_service_test.go:831:14: G112: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server (gosec)
|
|
server := &http.Server{
|
|
Handler: http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
|
|
w.WriteHeader(http.StatusNotFound)
|
|
}),
|
|
}
|
|
internal/util/crypto_test.go:63:2: G101: Potential hardcoded credentials (gosec)
|
|
secret := "a]3kL9#mP2$vN7@qR5*wX1&yT4^uI8%oE0!"
|
|
^
|
|
34 issues:
|
|
* errcheck: 12
|
|
* gosec: 22
|