Files
buzz/crates
Duncan 05566b9a69 fix(acp): gate sentinel total-content bound on raw content before trim
The desktop parser measured MAX_CONTENT_BYTES against content.trim(),
while the Rust producer bounds the complete serialized output. A valid
sentinel padded with leading/trailing whitespace could exceed the frozen
4096-byte boundary and still parse — signed relay content bypassing the
symmetric total-content limit up to the relay's generic ceiling. Gate the
raw content before trimming so the parser bound matches producer output
byte-for-byte; keep trimming afterward for ordinary small whitespace.

Co-authored-by: Will Pfleger <pfleger.will@gmail.com>
Signed-off-by: Will Pfleger <pfleger.will@gmail.com>
2026-08-25 18:22:04 -04:00
..