Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Linter: gosec, Rule: G203 - Use of unescaped data in HTML templates. Should we enable it? #12904

Closed
zak-pawel opened this issue Mar 19, 2023 · 1 comment
Closed

Linter: gosec, Rule: G203 - Use of unescaped data in HTML templates. Should we enable it? #12904

zak-pawel opened this issue Mar 19, 2023 · 1 comment
Labels
linter

Comments

@zak-pawel
Copy link
Collaborator

Use Case

This issue starts discussion about enabling:

Rule is mapped to CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

Expected behavior

Decision if rule should be enabled or not.

Actual behavior

For this rule no findings were found in current code.

Additional info

For this rule no additional configuration can be provided.
@zak-pawel zak-pawel added feature request Requests for new plugin and for new features to existing plugins needs design review labels Mar 19, 2023
@powersj
Copy link
Contributor

powersj commented Mar 21, 2023

+1 seems harmless to add, no?

@zak-pawel zak-pawel added linter and removed feature request Requests for new plugin and for new features to existing plugins needs design review labels Mar 22, 2023
This was referenced Mar 26, 2023
Merged
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
linter
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@powersj @zak-pawel