Skip to content

Release v2.0.2#20

Merged
msimerson merged 9 commits intomasterfrom
release-2.0.2
Apr 8, 2026
Merged

Release v2.0.2#20
msimerson merged 9 commits intomasterfrom
release-2.0.2

Conversation

@msimerson
Copy link
Copy Markdown
Member

@msimerson msimerson commented Apr 8, 2026

  • fix: GetDataStream must extend Writable, not legacy Stream fix: GetDataStream must extend Writable, not legacy Stream #19
  • fix: limit header size to prevent memory exhaustion
  • fix: limit boundaries to prevent memory exhaustion
  • fix: sanitize the spool filename, prevent path traversal
  • fix: on Writable stream, set autoClose: false
    • end is a noop here, that's for fs.createReadableStream

@msimerson msimerson marked this pull request as ready for review April 8, 2026 14:52
- fix: limit header size to prevent memory exhaustion
- fix: limit boundaries to prevent memory exhaustion
- fix: sanitize the spool filename, prevent path traversal
@msimerson msimerson merged commit 4ee9df2 into master Apr 8, 2026
22 checks passed
@msimerson msimerson deleted the release-2.0.2 branch April 8, 2026 20:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant