Commit 89e31ba
committed
🍒 pick e224fd6: 🥅 Validate that Atom and Flag are not empty
`Atom` and `Flag` have only been used for argument validation since
v0.6.4 (as well as v0.5.14 and v0.4.24), and they validated for absense
of `atom-specials`. But they failed to check that the strings are not
empty.
While this could be used to create syntax errors, I don't believe it
amounts a security vulnerability. The result would be no different from
any other `BAD` server response, which an application must be prepared
to handle.1 parent 4063bc1 commit 89e31ba
2 files changed
Lines changed: 4 additions & 0 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
241 | 241 | | |
242 | 242 | | |
243 | 243 | | |
| 244 | + | |
| 245 | + | |
244 | 246 | | |
245 | 247 | | |
246 | 248 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
85 | 85 | | |
86 | 86 | | |
87 | 87 | | |
| 88 | + | |
88 | 89 | | |
89 | 90 | | |
90 | 91 | | |
| |||
116 | 117 | | |
117 | 118 | | |
118 | 119 | | |
| 120 | + | |
119 | 121 | | |
120 | 122 | | |
121 | 123 | | |
| |||
0 commit comments