java-topology/whitepaper
russell@unturf.com 9a0253e724 browser-automation: 4 CWE-407 patches (selenium x2, playwright, webdriverio)
selenium-0001: SessionCapabilitiesMutator list.contains O(NxM) -> LinkedHashSet
  O(N+M). Grid Node session mutation hot path. Bench: 192x at N=M=1000.

selenium-0002: ChromiumOptions merge helpers consolidate four list.contains
  loops behind addArgumentsUnique/addEncodedExtensionsUnique. Bench: 254x
  at N=M=1000.

playwright-0001: roleUtils validRoles / allowsNameFromContent Array.includes
  on 20-70 element constant arrays per element. Converted to Set<string>
  at module load. Bench: 11x at N=10000 elements.

webdriverio-0001: xpath-conditions extractOrConditions orMatches.find +
  values.includes per regex match -> Map<attr, Set<values>>. Bench: 6x at
  K=V=60 in the 'mobileSelectorPerformanceOptimizer'.

Each defect ships: ticket, patch with complexity-gate header, Python
benchmark + correctness test, Makefile, outreach brief. All 16 tests
pass. UNDF IDs: 1276 (playwright), 1277 (selenium-0001), 1288
(selenium-0002), 1289 (webdriverio).
2026-04-22 18:14:39 -04:00
..
disclosure undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
fonts undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
gumyum disclosure: add security@undefect.com contact to whitepaper §16 and gumyum minecraft page 2026-03-27 10:57:50 -04:00
outreach browser-automation: 4 CWE-407 patches (selenium x2, playwright, webdriverio) 2026-04-22 18:14:39 -04:00
proof undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
vectors undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
abstract.rst undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
conf.py undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
executive-summary.md undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
executive-summary.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
full-paper.md fix: remove 'The' from fixed system harmony sentence 2026-04-10 12:40:37 -04:00
full-paper.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
index.rst undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
Makefile whitepaper: add html-cwe407 and html-minecraft targets; update clean 2026-03-27 19:52:27 -04:00
MD5SUMS whitepaper: onos-0004 entry, count 615→616, rebuild PDF 2026-03-28 10:56:56 -04:00
outreach.tar.gz undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
pdf-style.css undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-cwe407-2026-03-24.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
undefect-cwe407-2026-03-25.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
undefect-cwe407-2026-03-26.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-cwe407-2026-03-27.pdf godot-0005..0008 whitepaper entries + UNDF stamps; A* open_list.find O(N) 800x, skeleton child_bones 24x, RestFixer 188x, GLTF extensions 11x; count 611→615 2026-03-27 23:18:59 -04:00
undefect-minecraft-enterprise-java-2026-03-24.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-minecraft-enterprise-java-2026-03-25.pdf undefect. CWE-407 — 63 sites patched across 27 ecosystems 2026-03-26 17:11:57 -04:00
undefect-minecraft-enterprise-java-2026-03-26.pdf undefect. CWE-407 — 92 sites, 42 ecosystems 2026-03-26 19:48:18 -04:00
undefect-minecraft-enterprise-java-2026-03-27.pdf disclosure: add security@undefect.com contact to whitepaper §16 and gumyum minecraft page 2026-03-27 10:57:50 -04:00