ivuorinen/f2b
1
0
Fork 0
mirror of https://github.com/ivuorinen/f2b.git synced 2026-03-19 12:02:22 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(lint): fix lll violations and additional gosec/prealloc findings

Browse Source 
Co-authored-by: ivuorinen <11024+ivuorinen@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-03-15 14:23:03 +00:00
parent 0cb9da3085
commit e05ac8a895
5 changed files with 16 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
fail2ban/security_utils.go
View File

@@ -57,14 +57,6 @@ func ContainsPathTraversal(input string) bool {
// The returned patterns include both production patterns (real attack signatures)
// and test sentinels (used exclusively in test fixtures for validation).
func GetDangerousCommandPatterns() []string {
// Production patterns: Real command injection and SQL injection signatures
productionPatterns := []string{
"rm -rf", // Destructive file operations
"drop table", // SQL injection attempts
"'; cat", // Command injection with file reads
"/etc/passwd", "/etc/shadow", // Specific sensitive file access
}
// Test sentinels: Markers used exclusively in test fixtures
// These help verify pattern detection logic in tests
testSentinels := []string{
@@ -84,6 +76,16 @@ func GetDangerousCommandPatterns() []string {
"DANGEROUS_EVAL_FUNCTION",
}
// Production patterns: Real command injection and SQL injection signatures
// Preallocate with combined capacity to avoid reallocation when appending testSentinels
productionPatterns := make([]string, 0, 5+len(testSentinels))
productionPatterns = append(productionPatterns,
"rm -rf", // Destructive file operations
"drop table", // SQL injection attempts
"'; cat", // Command injection with file reads
"/etc/passwd", "/etc/shadow", // Specific sensitive file access
)
// Combine both lists for backward compatibility
return append(productionPatterns, testSentinels...)
}