go-tigertonic

go-tigertonic copied to clipboard

The HTTP response returns unsanitized value from Accept header. This may allow the attacker to conduct cross-site scripting attack. Technically, the likelihood of exploiting this is very low. It requires...

pich4ya

Handle unexpected status codes

2

Currently if you respond with a status code that doesn't explicitly have a counter set, you'll get a panic.

snikch

Lock-free per-request context

1

`WithContext` and `Context` are unnecessarily globally synchronized. I think the solution is essentially an `http.Handler` that allocates an instance of another `http.Handler` (this is the type of the per-request context)...

rcrowley

Allow no body when Content-Length = 0

3

The HTTP spec is ambiguous in determining if a request could have no body when the method is POST, PUT, or PATCH. Some popular HTTP server, like nginx, adopt the...

lhigueragamboa

accept tcp 127.0.0.1:12345: use of closed network connection

2

I'm using the HEAD from master, and getting this error: accept tcp 127.0.0.1:12345: use of closed network connection (This is the error returned from Server.ListenAndServe(), and in turn net.Listen()) I'm...

proteneer

Dropwizard-like validation

5

Dropwizard has a nice integration with Hibernate Validator that makes it easy to give good error messages when the user provides an incorrect JSON payload (e.g. missing a key). See:...

wadey

Given a tigertonic based server that serves both REST and web socket endpoints. And the server uses a logged HTTP handler (e.g. `tigertonic.ApacheLogged()`). When accessing a web socket API the...

crazytyper

Erroneously returns 405 when the last segment of the request URL matches a parameter in some other handled URL

2

I'm handling a couple of URLs: ``` go mux.Handle("GET", "/api/{organization}/groups", ...) mux.Handle("GET", "/api/{organization}/groups/{group}/hosts", ...) ``` Given this set of handlers: GET @ /api/12345/foo - Returns 404, as I'd expect ...but......

rengawm

Return Error Messages

1

This is a non issue really, I'm just curious! What's the design reason for spitting out the 'kind' of error? I don't get the benefit of return it to the...

everclear

Investigate native SPDY / HTTP/2.0 support

2

https://code.google.com/p/go/source/browse?repo=net

rcrowley