mirror of
https://github.com/PR0M3TH3AN/bitvid.git
synced 2026-11-02 02:42:28 +00:00
The hex-filter sanitizer covered ids/authors/#e/#p/#q but not the NIP-22 uppercase root-scope tags #E (root event id) and #P (root author pubkey). Relays hex-decode those too, and the kind-1111 comment subscriptions query by them, so an odd-length value bypassed the sanitizer and got the whole REQ rejected with "uneven size input to from_hex" (dropping that subscription's results). Add #E/#P to the sanitized fields. Co-Authored-By: Claude Opus 4.8 <[email protected]>