Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Do not MERGE : Audit Fixes 10: Insufficient validation of the input URLs #554

Closed

Conversation

Kayanski
Copy link
Contributor

Checklist

  • CI is green.
  • Changelog updated.

Copy link

cloudflare-workers-and-pages bot commented Nov 27, 2024

Deploying abstract-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: b985d4f
Status: ✅  Deploy successful!
Preview URL: https://a40d8a32.abstract-docs.pages.dev
Branch Preview URL: https://audit-fixes-10-insufficient.abstract-docs.pages.dev

View logs

Copy link

codecov bot commented Nov 27, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Please upload report for BASE (audit-fixes/root@a647229). Learn more about missing BASE report.

Additional details and impacted files
Files with missing lines Coverage Δ
...s/abstract-std/src/objects/validation/verifiers.rs 100.0% <100.0%> (ø)

@Kayanski Kayanski changed the base branch from main to audit-fixes/root November 27, 2024 13:57
Comment on lines +33 to +34
} else if let Err(e) = Url::parse(link) {
Err(ValidationError::LinkInvalidUrl(e))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The reason we didn't do this Url verification from the original audit results last year was because of wasm size increase with minimal benefit. Would you mind checking the size differences before and after?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The increase is ~ 160K, this is huge !
We might not want to merge that PR

@Kayanski Kayanski changed the title Audit Fixes 10: Insufficient validation of the input URLs Do not MERGE : Audit Fixes 10: Insufficient validation of the input URLs Nov 28, 2024
@Kayanski
Copy link
Contributor Author

Kayanski commented Dec 9, 2024

Closed because there is a 160K increase in wasm size because of this change alone

@Kayanski Kayanski closed this Dec 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants