mirrors/pocket-id
1
0
Fork 0
mirror of https://github.com/pocket-id/pocket-id.git synced 2026-03-24 12:30:07 +00:00
Code Activity

fix: token endpoint must not accept params as query string args (#1321)

Browse Source
This commit is contained in:
Alessandro (Ale) Segala
2026-02-17 20:31:09 -08:00
committed by GitHub
parent f0249377ac
commit eb0456a395
3 changed files with 245 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
backend/internal/service/geolite_service.go
View File

@@ -162,6 +162,8 @@ func (s *GeoLiteService) extractDatabase(reader io.Reader) error {
}
// Check if the file starts with the gzip magic number
// Gosec returns false positive for "G602: slice index out of range"
//nolint:gosec
isGzip := buf[0] == 0x1f && buf[1] == 0x8b
if !isGzip {