Skip to content

chore: [AG-290] Non-Forgeable Trust#42

Merged
dan-arpino merged 1 commit into
mainfrom
chore/AG-290-non-forgeable-trust
Jun 18, 2026
Merged

chore: [AG-290] Non-Forgeable Trust#42
dan-arpino merged 1 commit into
mainfrom
chore/AG-290-non-forgeable-trust

Conversation

@dan-arpino

@dan-arpino dan-arpino commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

Description

Making Trust less Forgeable by randomizing port (instead of predictable) and rejecting cross-origin requests

Checklist

  • Tests added and all succeed
  • Regenerated mocks, etc. (make generate)
  • Linted (make lint-fix)
  • README.md updated, if user-facing
  • License file updated, if new 3rd-party dependency is introduced

@dan-arpino dan-arpino requested review from a team as code owners June 16, 2026 19:14
@snyk-io

snyk-io Bot commented Jun 16, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dan-arpino dan-arpino force-pushed the chore/AG-290-non-forgeable-trust branch from c82cac5 to b3da2ef Compare June 16, 2026 19:21

@jboerma-snyk jboerma-snyk left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM! Small option to wrap up the POST check.

Comment thread internal/trust/trust.go Outdated
Comment on lines +264 to +270
@@ -243,6 +265,9 @@ func (t *FolderTrust) addHttpHandlers(logger zerolog.Logger, mux *http.ServeMux,
http.Error(w, "Method not allowed", http.StatusMethodNotAllowed)
return
}
if !validateRequest(w, r) {
return
}

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm wondering if the POST check should be wrapped up in validateRequest

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good call, let me wrap that in too!

@dan-arpino dan-arpino force-pushed the chore/AG-290-non-forgeable-trust branch from b3da2ef to 8288c36 Compare June 18, 2026 13:00
@dan-arpino dan-arpino merged commit 94b8645 into main Jun 18, 2026
10 checks passed
@dan-arpino dan-arpino deleted the chore/AG-290-non-forgeable-trust branch June 18, 2026 13:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants