Skip to content

Fix RCE attribute injection in generated Refit clients (GHSA-3fhm-p725-h3g3, GHSA-58x9-vjvp-6mx8, GHSA-p32v-8v8j-j534) - #1178

Merged
christianhelle merged 20 commits into
mainfrom
fix-ghsa-3fhm-p725-h3g3-rce-attribute-injection
Jul 27, 2026
Merged

Fix RCE attribute injection in generated Refit clients (GHSA-3fhm-p725-h3g3, GHSA-58x9-vjvp-6mx8, GHSA-p32v-8v8j-j534)#1178
christianhelle merged 20 commits into
mainfrom
fix-ghsa-3fhm-p725-h3g3-rce-attribute-injection

style: use explicit types in security test helpers

7e7d7bb
Select commit
Loading
Failed to load commit list.
Codecov / codecov/project failed Jun 30, 2026 in 1s

94.79% (-0.04%) compared to fe42089

View this Pull Request on Codecov

94.79% (-0.04%) compared to fe42089

Details

Codecov Report

❌ Patch coverage is 93.44262% with 4 lines in your changes missing coverage. Please review.
✅ Project coverage is 94.79%. Comparing base (fe42089) to head (7e7d7bb).
⚠️ Report is 7 commits behind head on main.

Files with missing lines Patch % Lines
...fitter.Core/Validation/AttributeStringValidator.cs 92.59% 1 Missing and 3 partials ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1178      +/-   ##
==========================================
- Coverage   94.82%   94.79%   -0.04%     
==========================================
  Files          80       81       +1     
  Lines        3557     3612      +55     
==========================================
+ Hits         3373     3424      +51     
- Misses         75       76       +1     
- Partials      109      112       +3     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.