vrr/Pulse
2
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-19 10:33:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 13

Harden remaining CodeQL security boundaries

Browse source
This commit is contained in:
rcourtman 2026-07-09 19:46:40 +01:00
parent e8ad8b2fd3
commit 042e7ef966
63 changed files with 778 additions and 303 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.github/codeql/extensions/pulse-security-models/models/go-storage.yml vendored
View file

@ -7,8 +7,10 @@ extensions:
- ["github.com/rcourtman/pulse-go-rewrite/internal/securityutil", "", false, "JoinStorageLeaf", "", "", "ReturnValue[0]", "path-injection", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/securityutil", "", false, "NormalizeStorageDir", "", "", "ReturnValue[0]", "path-injection", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/securityutil", "", false, "ValidateOutboundFetchURL", "", "", "ReturnValue[0]", "request-forgery", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/api", "", false, "normalizeConfiguredSSOFilePath", "", "", "ReturnValue[0]", "path-injection", "manual"]
- addsTo:
pack: codeql/go-all
extensible: barrierGuardModel
data:
- ["github.com/rcourtman/pulse-go-rewrite/internal/config", "", false, "isValidOrgID", "", "", "Argument[0]", "true", "path-injection", "manual"]
- ["github.com/rcourtman/pulse-go-rewrite/internal/api", "", false, "isValidTenantOrgID", "", "", "Argument[0]", "true", "path-injection", "manual"]