Skip to content

unclosed-http-response-body

Detect locally acquired HTTP response bodies that are not closed.

Updated View as Markdown

Default severity: error

A response body retains its connection and related resources until closed. The check follows local response aliases and accepts an explicit close or an obvious ownership transfer such as returning the response.

Bad

response, err := http.Get(endpoint)
if err != nil {
	return err
}
return decode(response.Body)

Good

response, err := http.Get(endpoint)
if err != nil {
	return err
}
defer response.Body.Close()
return decode(response.Body)
Navigation

Type to search…

↑↓ navigate↵ selectEsc close