How to convert a string to a constant?

Getting Help
1

I need to use http.Get() function which accepts a constant url.
On passing a string(accepting from user) to it throws a warning “G107: Potential HTTP request made with variable url”

2

Can you please share a minimal example, I have never seen that warning…

To your question though, you can create a constant string using const, though that is contradicted by “accepting from user”. There is no way to convert a runtime provided value to a constant, for which the literal value has to be known at compiletime.

3

func fetch (url string) {

var resp *http.Response
var err error

resp, err = http.Get(url)  //throws warning

if err != nil {
	return nil, err
}

resp.Body.Close()

}

4

I use similar code in my everyday stuff, I don’t see any warnings there. Neither at compile nor runtime. Can you please elaborate where the warning is “thrown”?

5

It sounds like you’re using the gosec tool provided by securego. The warning is because you’re accepting a URL from the user. The resolution is to not accept URL input from the user because the user might provide you with a malicious URL that your program will Get and possibly then do something unsafe. There might be a way to disable that warning but I don’t know how. You’ll have to check that linter’s documentation.

6

This topic was automatically closed 90 days after the last reply. New replies are no longer allowed.