GO-2024-3228: Coder vulnerable to post-auth URL redirection to untrusted site ('Open Redirect') in github.com/coder/coder
The highest tagged major version isv2.
updatecheck
packageThis package is not in the latest version of its module.
Details
Validgo.mod file
The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
- Redistributable license
Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
- Tagged version
Modules with tagged versions give importers more predictable builds.
Stable versionWhen a project reaches major version v1 it is considered stable.
- Learn more about best practices
Repository
Links
Open Source Insights
Documentation¶
Overview¶
Package updatecheck provides a mechanism for periodically checkingfor updates to Coder.
The update check is performed by querying the GitHub API for thelatest release of Coder.
Index¶
Constants¶
This section is empty.
Variables¶
This section is empty.
Functions¶
This section is empty.
Types¶
typeChecker¶
type Checker struct {// contains filtered or unexported fields}Checker is responsible for periodically checking for updates.
typeOptions¶
type Options struct {// Client is the HTTP client to use for the update check,// if omitted, http.DefaultClient will be used.Client *http.Client// URL is the URL to check for the latest version of Coder,// if omitted, the default URL will be used.URLstring// Interval is the interval at which to check for updates,// default 24h.Intervaltime.Duration// UpdateTimeout sets the timeout for the update check,// default 30s.UpdateTimeouttime.Duration// Notify is called when a newer version of Coder (than the// last update check) is available.Notify func(rResult)}Options set optional parameters for the update check.
Source Files