- Add platform allowlist validation (windows, darwin, linux) and length caps for version (≤20) and product_id (≤10) in handleTelemetry to prevent unbounded Redis hash growth from attacker-controlled field values. - Add HTTP method guard to handleCLIVersion to reject non-GET requests with 405 Method Not Allowed. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| Dockerfile | ||
| go.mod | ||
| go.sum | ||
| main.go | ||