5 commits

Author	SHA1	Message	Date
Andrew Nesbitt	e36a92433e	Clean up review feedback: use path.Ext for extension checks, remove dead getStripPrefix, add openArchive tests	2026-04-06 19:06:48 +01:00
Andrew Nesbitt	599fe9e254	Fix all golangci-lint issues across the codebase (#32) ... * Fix all golangci-lint issues across the codebase Resolve 77 lint issues reported by golangci-lint with gocritic, gocognit, gocyclo, maintidx, dupl, mnd, unparam, ireturn, goconst, and errcheck enabled. Net reduction of ~175 lines through shared helpers and deduplication. * Suppress staticcheck SA1019 for intentional deprecated field usage The Storage.Path field is deprecated but still read for backwards compatibility with existing configs that haven't migrated to the URL field.	2026-03-18 10:59:29 +00:00
Andrew Nesbitt	9e97a3316a	Escape user-controlled strings in browse source JavaScript ... File paths from archive contents were interpolated directly into onclick handlers and innerHTML via template literals. A crafted filename containing quotes could break out of the string context and execute arbitrary JS. Add an escapeHTML helper and use it on all interpolated path and URL values in the browse source page.	2026-03-12 11:59:14 +00:00
Andrew Nesbitt	8ddf07587c	Fix golangci-lint errors (errcheck, staticcheck, unused)	2026-02-16 10:53:21 +00:00
Andrew Nesbitt	2d7cb8eae5	Refactoring and features	2026-02-03 22:40:40 +00:00