JS

fix(builtins): sanitize curl multipart field names to prevent header injection #673

Sign in to view logs

Triggered via pull request April 4, 2026 00:44

chaliy

synchronize #1053

fix/issue-985-curl-multipart-injection

Status Success

Total duration 2m 36s

Artifacts –

js.yml

on: pull_request

Matrix: build-and-test

Annotations

4 warnings

deno 2.x: crates/bashkit/src/builtins/curl.rs#L703

constant `SENSITIVE_HEADERS` is never used

deno 2.x: crates/bashkit/src/builtins/curl.rs#L693

function `same_origin` is never used

deno canary: crates/bashkit/src/builtins/curl.rs#L703

constant `SENSITIVE_HEADERS` is never used

deno canary: crates/bashkit/src/builtins/curl.rs#L693

function `same_origin` is never used