|
|
ec186e286c
|
element-web-0003/0004 + conduit-0001: CWE-407 deep scan — 3 new defects, 6/6 PASS
element-web-0003: TextForEvent.tsx textForCanonicalAliasEvent alt_aliases
.filter(x => !arr.includes(x)) O(A*B) MEDIUM 19.5x — fix: Set.has()
element-web-0004: utils/arrays.ts arrayDiff + arrayIntersection
.filter(i => !arr.includes(i)) O(A*B) MEDIUM 18x — fix: Set.has()
Used by 15+ callsites: room-list, notifications, spaces, beacons, maps
conduit-0001: server_server.rs get_missing_events_route
earliest_events.contains() (Vec) in growing BFS loop O(Q*E) MEDIUM-HIGH 7.4x
Federation endpoint — remote server controls input size
matrix-rust-sdk: could not clone (GitHub HTTPS unreachable)
|
2026-03-30 15:16:54 -04:00 |
|
|
|
c1f0ce8eda
|
wave16b: element-web/bun CWE-407 patches + unit tests
element-web-0001: TextForEvent.tsx user dedup array → Set (15x, HIGH)
element-web-0002: TextForEvent.tsx pinned filter indexOf → Set.has (13x, MEDIUM)
bun-0001: yarn.zig scoped version two-pass scan → single pass (4x, MEDIUM)
5 tests: 5/5 PASS
|
2026-03-30 07:37:28 -04:00 |
|
