Skip to content

Conversation

@petergoldstein
Copy link
Owner

@petergoldstein petergoldstein commented Oct 25, 2022

Do some input sanitization for the meta protocol. Since this protocol uses raw test, it is possible to execute an injection attack against unsanitized inputs.

This PR explicitly sanitizes the CAS arguments and the ttl passed to flush.

I also added some missing tests for meta_arithmetic and fixed a few lints.

Sanitizes the flush input for the meta protocol
@petergoldstein
Copy link
Owner Author

@xhzeem I believe this will address the issue you raised. Feel free to comment. Thanks again.

@petergoldstein petergoldstein merged commit 48d594d into main Oct 27, 2022
@petergoldstein petergoldstein deleted the bugfix/932 branch October 27, 2022 21:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants