Summary
status --check=<scopes> parses a comma-separated scope list without bounding the raw value length or number of entries.
Evidence
QueryCommandRunner handles inline --check= values with AddStatusCheckScopes, which loops over rawScopes.Split(,, StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries) and lowercases each entry before validating against the finite scope set.
Impact
Large --check= values can allocate and process many entries before the command reports unsupported scopes.
Expected
Reject overlarge scope lists before splitting, using a documented maximum length and entry count.
Summary
status --check=<scopes>parses a comma-separated scope list without bounding the raw value length or number of entries.Evidence
QueryCommandRunnerhandles inline--check=values withAddStatusCheckScopes, which loops overrawScopes.Split(,, StringSplitOptions.RemoveEmptyEntries | StringSplitOptions.TrimEntries)and lowercases each entry before validating against the finite scope set.Impact
Large
--check=values can allocate and process many entries before the command reports unsupported scopes.Expected
Reject overlarge scope lists before splitting, using a documented maximum length and entry count.