Skip to content

Scribe v1.3.2 - Security Hardening

Choose a tag to compare

View all tags
@ericplane ericplane released this 09 Aug 15:35
· 7 commits to main since this release
v1.3.2
1a67334
  • A hardening pass on the client boundary: command arguments decode only after the rate limit and every other gate, a pre-Ready session answers not-ready for every name so commands can't be enumerated, and new MaxInboundFrameRate caps raw inbound frames per player
  • Receipt de-duplication evicts by age (PurchaseIdTTL, MaxProcessedPurchaseIds) rather than count, warning PURCHASE_ID_EVICTED when a still-retryable id is dropped
  • Command Args accept Scribe declarators and nested shapes
  • New Security guide

Full Changelog: v1.3.1...v1.3.2

Assets 3
Loading