Commit Graph
4 Commits
Author SHA1 Message Date
google-labs-jules[bot]andPR0M3TH3AN 57551a8acd security: fix magnet parameter injection and data loss
- Fix magnet parameter injection vulnerability in `js/magnetShared.js` by ensuring all parameter values are decoded during normalization and re-encoded during URI construction.
- Fix a data loss bug in `normalizeMagnetInput` where parameter values containing `=` were truncated due to `split("=", 2)`.
- Consistently decode all magnet parameter values to ensure a clean internal representation.
- Use `encodeURIComponent` in `buildMagnetUri` to safely reconstruct the magnet URI.
- Update `tests/edit-modal-submit-state.test.mjs` and `tests/video-note-payload.test.mjs` to handle encoded magnet URIs.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-11 11:41:17 +00:00
google-labs-jules[bot]andPR0M3TH3AN 852e62c341 security: fix magnet parameter injection and data loss
- Fix magnet parameter injection vulnerability in `js/magnetShared.js` by ensuring all parameter values are decoded during normalization and re-encoded during URI construction.
- Fix a data loss bug in `normalizeMagnetInput` where parameter values containing `=` were truncated due to `split("=", 2)`.
- Consistently decode all magnet parameter values to ensure a clean internal representation.
- Use `encodeURIComponent` in `buildMagnetUri` to safely reconstruct the magnet URI.
- Update `tests/edit-modal-submit-state.test.mjs` and `tests/video-note-payload.test.mjs` to handle encoded magnet URIs.

Co-authored-by: PR0M3TH3AN <[email protected]>
2026-02-11 11:36:40 +00:00
thePR0M3TH3AN 796b6c9ae6 Support per-variant duration and bitrate in NIP-71 metadata 2025-10-29 17:06:19 -04:00
thePR0M3TH3AN 700056b5fc Extract video note payload normalization 2025-10-26 18:21:32 -04:00