Skip to content

v0.1.2

Choose a tag to compare

View all tags
@MerlijnW70 MerlijnW70 released this 20 Jun 09:55
v0.1.2
6784ed6

Security patch release.

Security

  • Path-traversal fix (high): scenario/--name validated before becoming a file path.
  • Deep-CPI-tree DoS fix: call-tree nesting capped (no stack overflow on adversarial logs).
  • Resource limits: 64 MiB cap on file reads, 32 MiB cap on RPC response bodies.

Added

  • import --signature <sig> --rpc <url> — fetch a transaction's logs live over rustls.

Changed

  • Honest placeholders: config mode defaults to recorded + validated; core backend stubs point to the integration crates.

CI green: build/test/clippy/fmt, MSRV 1.85, program-test, mollusk.

Assets 12
Loading