Skip to content

v1.6.1

Choose a tag to compare

View all tags
@ludwigtomas ludwigtomas released this 17 Jun 22:18
· 19 commits to main since this release
v1.6.1
c8373d7

Security

  • Hardened the v1.6.0 correlation logging against injection. The request-id validation regex now uses the /D anchor so a trailing newline can no longer slip through withRequestId() / the response-field guard, and the server-supplied upload status is control-character-stripped and length-capped before it is logged (the one server string the v1.6.0 work left raw).
Assets 2
Loading