Ecosyste.ms: Issues

An open API service for providing issue and pull request metadata for open source projects.

GitHub / google/go-safeweb issues and pull requests

#361 - Bump golang.org/x/net from 0.17.0 to 0.23.0

Pull Request - State: closed - Opened by dependabot[bot] 7 months ago
Labels: dependencies

#360 - collector plugin should pass request context

Issue - State: open - Opened by ribrdb 11 months ago

#359 - Bump golang.org/x/crypto from 0.14.0 to 0.17.0

Pull Request - State: closed - Opened by dependabot[bot] 11 months ago
Labels: dependencies

#358 - Bump golang.org/x/net from 0.7.0 to 0.17.0

Pull Request - State: closed - Opened by dependabot[bot] about 1 year ago
Labels: dependencies

#357 - chore: use bytes.Equal

Pull Request - State: closed - Opened by testwill about 1 year ago

#356 - Make "copyright" CI action pass

Pull Request - State: closed - Opened by bsiegert over 1 year ago - 1 comment
Labels: internal cleanup

#355 - Attempt to repair Continuous Integration

Pull Request - State: closed - Opened by bsiegert over 1 year ago - 1 comment

#354 - Repair CI

Issue - State: closed - Opened by bsiegert over 1 year ago - 1 comment
Labels: internal cleanup

#353 - Bump golang.org/x/crypto from 0.0.0-20210322153248-0c34fe9e7dc2 to 0.1.0

Pull Request - State: closed - Opened by dependabot[bot] over 1 year ago - 1 comment
Labels: dependencies

#352 - Bump golang.org/x/sys from 0.0.0-20210514084401-e8d321eab015 to 0.1.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago - 3 comments
Labels: dependencies

#351 - Bump golang.org/x/net from 0.0.0-20210510120150-4163338589ed to 0.7.0

Pull Request - State: closed - Opened by dependabot[bot] almost 2 years ago
Labels: dependencies

#350 - Test failure with upcoming Go 1.20 release

Issue - State: closed - Opened by ianlancetaylor about 2 years ago - 3 comments

#349 - Examples fix and tests introduction

Pull Request - State: closed - Opened by AzraelSec about 2 years ago

#348 - Run gofmt from Go 1.19 over all files

Pull Request - State: closed - Opened by bsiegert about 2 years ago - 3 comments

#347 - Create adoption, migration and code structure documentation

Issue - State: open - Opened by empijei about 2 years ago
Labels: documentation

#346 - feat: added xsrfblockall plugin

Pull Request - State: closed - Opened by Al-Pragliola about 2 years ago - 1 comment

#345 - Design and create a way to have a "safe buffer" that allows to cache responses in a safe way.

Issue - State: open - Opened by empijei about 2 years ago
Labels: enhancement, core, needs decision

#344 - Bump language version to 1.18

Issue - State: open - Opened by empijei about 2 years ago
Labels: enhancement, core, needs decision

#343 - Add report-to and general reporting group support to the CSP plugin

Issue - State: open - Opened by empijei about 2 years ago
Labels: enhancement, good first issue, plugin

#342 - Create a keyless XSRF protection that allows for state-changing requests.

Issue - State: closed - Opened by empijei about 2 years ago - 1 comment
Labels: plugin, unplanned

#341 - Update plugins to reflect internal state.

Pull Request - State: closed - Opened by empijei about 2 years ago - 4 comments

#340 - Create a template package with all boilerplate and all instructions needed to use the framework

Issue - State: open - Opened by empijei about 2 years ago
Labels: documentation, enhancement, core

#339 - Reassess the cors plugin

Issue - State: open - Opened by empijei about 2 years ago
Labels: help wanted, plugin, proposal, needs decision

#338 - Create an integration test for the safehttp/defaults builder

Issue - State: open - Opened by empijei about 2 years ago
Labels: enhancement, help wanted, testing, core

#337 - Create a XSRF plugin that blocks all state-changing requests

Issue - State: closed - Opened by empijei about 2 years ago
Labels: enhancement, good first issue, help wanted, plugin

#336 - Uniform builtin plugins exemption structures to allow for allowlisting of packages.

Issue - State: open - Opened by empijei about 2 years ago
Labels: good first issue, help wanted, internal cleanup, plugin

#335 - Make Bancheck support "TestOnly" or similar mechanisms.

Issue - State: open - Opened by empijei about 2 years ago
Labels: help wanted, unplanned, needs decision, bancheck

#334 - all: update build tags

Pull Request - State: closed - Opened by bsiegert almost 3 years ago - 1 comment

#333 - I think we're getting somewhere with generics.

Pull Request - State: open - Opened by kele almost 3 years ago

#332 - Muxes are not composable

Issue - State: open - Opened by empijei about 3 years ago - 2 comments
Labels: enhancement, good first issue, core, v0.2

#331 - (*safehttp.Config).Mux() is not safe for concurrent use

Issue - State: closed - Opened by empijei about 3 years ago
Labels: bug

#330 - gofmt GitHub action seems broken

Issue - State: closed - Opened by kele about 3 years ago - 2 comments
Labels: bug

#329 - #292 Create a contributors guide

Pull Request - State: open - Opened by leozz37 about 3 years ago

#328 - Status badges for README

Pull Request - State: open - Opened by leozz37 about 3 years ago

#326 - Add a plaintext type that is safe by default

Pull Request - State: closed - Opened by kallydev over 3 years ago - 2 comments

#325 - Provide a StripPrefix utility

Pull Request - State: closed - Opened by kele over 3 years ago

#324 - Remove the Map type

Issue - State: open - Opened by empijei over 3 years ago

#323 - Add bancheck documentation

Pull Request - State: closed - Opened by mtrzos over 3 years ago
Labels: v0.1

#321 - Interceptors can now carry state throughout the request processing.

Pull Request - State: closed - Opened by kele over 3 years ago
Labels: core

#320 - Add an After stage to the interceptor flow

Issue - State: open - Opened by kele over 3 years ago
Labels: core

#319 - Make Intercept variadic to better support orchestration.

Pull Request - State: closed - Opened by empijei over 3 years ago

#318 - Re-assess the one-config-per-interceptor hard limit

Issue - State: closed - Opened by empijei over 3 years ago - 2 comments

#317 - Provide a way to check if a ServeMuxConfig has a specific interceptor installed.

Issue - State: closed - Opened by empijei over 3 years ago - 2 comments

#316 - Provide a StripPrefix utility

Issue - State: closed - Opened by empijei over 3 years ago
Labels: v0.1

#314 - SetContext violates the context.Context contract

Issue - State: closed - Opened by empijei over 3 years ago - 2 comments
Labels: core

#313 - Provide a way for the dispatcher to extract the request for the given flight

Issue - State: closed - Opened by empijei over 3 years ago - 2 comments

#312 - Make interceptors match configs instead of configs match interceptors.

Pull Request - State: closed - Opened by empijei over 3 years ago

#311 - Provide a "ServeTemplates" helper

Issue - State: open - Opened by empijei over 3 years ago
Labels: v0.2

#310 - Can we integrate with gorilla/mux for path parameters support?

Issue - State: open - Opened by kele over 3 years ago - 2 comments
Labels: enhancement, core

#309 - Add support for wrapped interceptor, detect config clashes.

Pull Request - State: closed - Opened by empijei over 3 years ago

#308 - Reserve characters for path parameters

Issue - State: open - Opened by empijei over 3 years ago - 1 comment

#307 - Support Interceptor Wrapping

Issue - State: open - Opened by empijei over 3 years ago - 1 comment
Labels: documentation, enhancement, v0.1

#306 - xsrfhtml: Support key rotation

Issue - State: open - Opened by empijei over 3 years ago
Labels: enhancement

#305 - reportingapi: Add an option to serialize it as a structured header.

Issue - State: open - Opened by empijei over 3 years ago
Labels: stretch, unplanned

#304 - Add report-to plugin.

Pull Request - State: closed - Opened by empijei over 3 years ago

#303 - Move away from "ban" in favor of "restrict" in the language

Issue - State: open - Opened by kele over 3 years ago
Labels: internal cleanup, bancheck

#302 - Make sure that no two given configs apply to the same interceptor

Issue - State: closed - Opened by empijei over 3 years ago
Labels: enhancement, good first issue, core, v0.1

#301 - fetchmetadata: Update to new API.

Pull Request - State: closed - Opened by empijei over 3 years ago

#300 - fetchmetadata: switch to configs for exceptions

Issue - State: closed - Opened by empijei over 3 years ago

#299 - Implement a ReportTo plugin

Issue - State: closed - Opened by empijei over 3 years ago

#298 - Small changes to the example app. Added godoc comment to server.go.

Pull Request - State: closed - Opened by kele over 3 years ago

#297 - bancheck: Provide configurations

Issue - State: open - Opened by empijei over 3 years ago
Labels: bancheck

#296 - Add example application.

Pull Request - State: closed - Opened by empijei over 3 years ago

#295 - bancheck: Does it work for methods of concrete types?

Issue - State: open - Opened by kele over 3 years ago - 5 comments
Labels: bancheck

#294 - bancheck: Add documentation to doc.go

Issue - State: closed - Opened by kele over 3 years ago - 1 comment
Labels: bancheck

#293 - bancheck: Add tests for aliasing

Issue - State: open - Opened by kele over 3 years ago
Labels: bancheck

#292 - Create a contributors guide

Issue - State: open - Opened by kele over 3 years ago

#291 - Allow JS in static HTML files

Issue - State: open - Opened by empijei over 3 years ago
Labels: plugin, v0.2

#290 - Golint fixes.

Pull Request - State: closed - Opened by kele over 3 years ago

#289 - Remove NoContent special-casing.

Pull Request - State: closed - Opened by empijei over 3 years ago

#288 - Turn redirects into responses.

Pull Request - State: closed - Opened by empijei over 3 years ago

#287 - A way to adopt Go Safe Web one handler at a time

Pull Request - State: closed - Opened by kele over 3 years ago - 1 comment

#286 - xsrfhtml: relax action check to host.

Pull Request - State: closed - Opened by empijei over 3 years ago
Labels: bug

#285 - htmlinject: fix bug that caused *Embed functions to still hit the disk.

Pull Request - State: closed - Opened by empijei over 3 years ago

#284 - Fix brittle test

Pull Request - State: closed - Opened by dsnet over 3 years ago - 2 comments

#283 - Add representation of a bancheck config.

Pull Request - State: closed - Opened by mtrzos over 3 years ago

#282 - Add linter for banned imports and function calls

Pull Request - State: closed - Opened by mtrzos over 3 years ago

#281 - Complete overhaul of the safehttptest package

Pull Request - State: closed - Opened by kele over 3 years ago
Labels: testing

#280 - Rename "Dispatcher"

Issue - State: open - Opened by empijei over 3 years ago - 1 comment
Labels: v0.1

#279 - Refactor handler generation in mux.go and expose handler factory.

Pull Request - State: closed - Opened by mikue over 3 years ago - 3 comments

#278 - MethodNotAllowed errors now go through ResponseWriter.WriteError

Pull Request - State: closed - Opened by kele over 3 years ago - 1 comment

#270 - A linter for disallowing imports and function calls

Issue - State: closed - Opened by kele over 3 years ago

#260 - Support streaming responses

Issue - State: open - Opened by empijei over 3 years ago
Labels: good first issue, core, v0.1, proposal

#258 - Add XFO support for older browsers.

Issue - State: closed - Opened by mtrzos over 3 years ago - 1 comment
Labels: enhancement

#254 - Provide a way to execute a template by name

Issue - State: closed - Opened by empijei over 3 years ago

#248 - Example of mixing net/http and safehttp handlers using http.Handler.

Pull Request - State: closed - Opened by mikue almost 4 years ago - 2 comments

#245 - Allow using ServeMux as a factory for net/http.Handlers

Issue - State: closed - Opened by kele almost 4 years ago - 2 comments
Labels: enhancement, good first issue, core, proposal

#238 - Make interceptor plugins consistent

Issue - State: open - Opened by empijei almost 4 years ago
Labels: internal cleanup

#233 - Add path traversal attack tests

Issue - State: open - Opened by kele almost 4 years ago - 1 comment
Labels: testing, core

#230 - When mux responds with Method Not Allowed, make the response go through WriteError

Issue - State: closed - Opened by kele almost 4 years ago - 1 comment
Labels: needs decision

#229 - safehttp: correct the error message of test header is claimed

Pull Request - State: closed - Opened by 0x221A almost 4 years ago

#228 - Add support for custom templated response types

Issue - State: closed - Opened by empijei almost 4 years ago - 2 comments
Labels: enhancement, core

#217 - Add a Reporting Plugin

Issue - State: closed - Opened by empijei about 4 years ago
Labels: v0.1

#215 - Provide an ergonomic way to do per-handler interceptor configuration

Issue - State: open - Opened by empijei about 4 years ago - 5 comments
Labels: v0.1, needs decision

#203 - All plugins should have example tests

Issue - State: open - Opened by kele about 4 years ago
Labels: documentation, good first issue, plugin

#193 - Allow users to provide their own router

Issue - State: open - Opened by empijei about 4 years ago - 2 comments
Labels: enhancement, needs decision