Files
craft-launcher/xtask
Dylan M. Taylor ec40f2e1cd fix(security): enforce bounded reads, deadlines, and terminal escaping in local mirror
Resolves F-019 (CWE-400), F-020 (CWE-117), and F-021 (CWE-117).
- Enforces per-byte read deadlines and socket timeouts during header parsing.
- Bounds maximum line length (8 KiB) and maximum total headers size (64 KiB) to prevent slowloris/DoS.
- Sanitizes request method and target before logging to stderr to prevent ANSI escape sequence injection.
2026-10-24 22:10:07 -04:00
..