java-topology/defects/ktor
russell@unturf.com 7c87dc590a test: add ktor CWE-1333 benchmark (cookie parser + OAuth2 response)
Verifies fixed regex eliminates backtracking:
- ktor-0001: adversarial cookie header <1ms (was: seconds)
- ktor-0002: adversarial OAuth body <0.01ms via character scan
2026-04-13 16:54:08 -04:00
..
patch ktor/undertow: CLEAN markers (no CWE-407 defects found) 2026-03-29 19:34:44 -04:00
unit test: add ktor CWE-1333 benchmark (cookie parser + OAuth2 response) 2026-04-13 16:54:08 -04:00