]> git.ardis.lu - envpass/commit
Refuse streaming/chunked requests
authorArdis Lu <ardisglu@gmail.com>
Fri, 17 Jul 2026 07:02:32 +0000 (00:02 -0700)
committerArdis Lu <ardisglu@gmail.com>
Fri, 17 Jul 2026 07:09:24 +0000 (00:09 -0700)
commit42177a0518ce9fbfbf7974dee95243a21ffc9770
treea4a03d671c9593362229bb3fc3cc8e18d53b5c94
parente0b74aca7903e8ace31650ebd374a8d9ca22925a
Refuse streaming/chunked requests

There is no practical reason the client must stream 32 bytes (should be able to send it in one chunk). This change reduces the attack surface and closes a potential DoS vector.
src/getPrf.js
test/getPrf.test.js
This page took 0.042358 seconds and 4 git commands to generate.