go-restful

go-restful copied to clipboard

[bug] types with same name mixed up

5

```go type SekResponse struct { Meta datatable.Response Results []*model.Sek `json:"results"` } ``` i've go structs like above, for some reason the generated doc contain fields that does not belongs to...

bokunodev

[security] Path parser inconsistency could lead to bypass several security checks in emicklei/go-restful

21

Reported via huntr.dev [here](https://huntr.dev/bounties/1beeab79-9a3a-4674-bd0a-78fff7cd6cca/). Created: `May 28th 2022` ## Description There is a inconsistency between how golang(and other packages) and go-restful parses url path. This incosistency could lead several security...

JamieSlome

Please deploy update of v2 to https://pkg.go.dev/

7

After trying to use prometheus, which uses go-restful, we discovered a CRITICAL CVE: Detecting gobinary vulnerabilities... bin/prometheus (gobinary) ========================= Total: 1 (CRITICAL: 1) ``` ┌────────────────────────────────┬───────────────┬──────────┬──────────────────────┬───────────────┬──────────────────────────────────────────────────────────────┐ │ Library │ Vulnerability │...

DSigmund

[feature] add prometheus metric filter

2

i want to add a prometheus metric filter to go-restful

fatelei

emicklei

Improper handling of empty POST requests.

3

When `POST`ing to a route without a `Content-Type` but the route is configured to consume some `Content-Type`, If there is also no body in that request, the `Content-Type` validation finishes...

jankyjames

jjlin

dependabot to group PRs

1

so this should only generate 1 PR every week.

haitch

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4.4.1 to 4.5.0. Commits e28ff12 chore(release): bump to 4.5.0 (#1477) 7594baa Use an existing token even if the PR is from a fork (#1471) 81c0a51 feat: add...

dependabot[bot]

Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.4 to 4.1.7. Release notes Sourced from actions/checkout's releases. v4.1.7 What's Changed Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739 Bump...

dependabot[bot]