diff options
| author | Yuriy Andamasov <yuriy@vyos.io> | 2026-07-28 05:36:57 +0300 |
|---|---|---|
| committer | Yuriy Andamasov <yuriy@vyos.io> | 2026-07-28 05:36:57 +0300 |
| commit | 0c9348035b583f3cd5fca72937a7ec1a61d7df45 (patch) | |
| tree | 6113a587f5dbbe4b719ad2bbcd940f29395d89c3 /docs/_static/css | |
| parent | cfca705f325a073c00e221a080eff968112d7653 (diff) | |
| download | vyos-documentation-claude/vyos-docs-security-remediate-2cff61.tar.gz vyos-documentation-claude/vyos-docs-security-remediate-2cff61.zip | |
security: normalize percent escapes per run, not per segmentclaude/vyos-docs-security-remediate-2cff61
Round-2 adversarial finding (Codex, medium): whole-segment decode meant
one malformed escape (a%20b%zz) threw for the segment and double-encoded
the valid escapes beside it. encodeSegment now decodes+re-encodes each
well-formed %HH run independently; literal spans (including a bare '%')
always pass through encodeURIComponent, so taint neutralization holds
unconditionally; a run decoding to invalid UTF-8 stays verbatim (already
pure %HH text).
workers suite 108/108 (+2 discriminating regression tests).
🤖 Generated by [robots](https://vyos.io)
Diffstat (limited to 'docs/_static/css')
0 files changed, 0 insertions, 0 deletions