First is that the comparison for nonce values has been made case sensitive. The nonces generated contain both upper and lowercase values, and the responses come back with matching case. Comparing case insensitive greatly reduces the overall entropy of the value and can allow invalid responses to pass.
I was testing some stuff and noticed that some requests were printing out despite being handled by my code. This change updates the message handling logic to only call unaccounted for when no event attempts to fire.
Hello! Two changes this time around.
First is that the comparison for nonce values has been made case sensitive. The nonces generated contain both upper and lowercase values, and the responses come back with matching case. Comparing case insensitive greatly reduces the overall entropy of the value and can allow invalid responses to pass.
I was testing some stuff and noticed that some requests were printing out despite being handled by my code. This change updates the message handling logic to only call unaccounted for when no event attempts to fire.