search

securego / gosec

Go security checker
https://securego.io
Apache License 2.0
7.71k stars 606 forks source link

Add more types to templates rule #1152

Closed ccojocar closed 3 months ago

ccojocar commented 3 months ago

Add additional types such as CSS, JSStr and Srcset to the template rule. These types are marked as a security risk in the godoc https://pkg.go.dev/html/template.

fixes #496