mirror of
https://github.com/storytold/craft-libs.git
synced 2026-11-08 19:42:12 +00:00
dotCooCoo
decd8b4794
- renditions checks where the last VectorCraft member after the JSON ends against max_total before it inflates anything past the marker, and keeps only the members' bytes, not the data before them. - A ZIP archive whose manifest.json has no format_version gives Unrecognized instead of Malformed. - A PhotoCraft manifest that is a JSON array is refused, as read_manifest refuses it. - renditions and outline refuse a PhotoCraft manifest nested past PhotoCraft's limit (manifest_depth(MAX_GROUP_DEPTH), 367 levels). - The TooNew check reads only the format's own version member, so a newer file that also has another format's member is TooNew, not Malformed. - A generator that is not a string reads as None. A repeated VectorCraft generator, preview or pdf reads as its last value, as File::read reads it. - The VectorCraft marker must follow the JSON's closing }, ] or ", through craft_vectorcraft_format::marker_at. - sniff reads the names in a whole archive's central directory, which info reads too; a head too short to reach it still uses the local headers.