mirror of
https://github.com/storytold/effectcraft.git
synced 2026-11-04 01:28:49 +00:00
The pre-scan window could end inside a trailer key, so a decoy like `/Encrypted` cut right after `/Encrypt` was taken for the Encrypt key and an unencrypted file was refused. A window that ends mid-token now ends before that token instead, and the past-the-window fallback reads the name whole (a real `/Encrypt` cut as `/Encryp|t` is still refused). Tests for that boundary, for a trailer with a long /ID, and for `#` without two hex digits staying as written in a name.