Tobias GesellchenandClaude Sonnet 4.6 bf3466d5d9 sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136) ...

Add validateZcPort alongside validateZcHost: the strconv.Atoi→Itoa
round-trip produces a sanitised integer string that CodeQL no longer
considers tainted, closing the remaining go/request-forgery findings
at zeroconf.go:263, :336, :413.

Also rejects clearly invalid inputs (non-numeric, out-of-range) that
would previously have produced a silently broken URL.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-05-25 21:17:57 +02:00

..

logutil.go

fix(security): sec7 — log-injection sweep, sanitizeErr helper

2026-05-25 11:28:26 +02:00

zeroconf_test.go

sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136)

2026-05-25 21:17:57 +02:00

zeroconf.go

sec8: validate zeroconf port to break CodeQL taint chain (alerts 134/135/136)

2026-05-25 21:17:57 +02:00