Consider introducing upper limits for PHASE_ONE_DURATION and PHASE_TWO_DURATION so that a flat finger error would not cause serious harm when initializing new events.
Also, there should probably be a reasonable upper limit for _phaseOneStartTime, as now the user can pass any value, but I think a start time in 50 years should not make sense.
Handle
pauliax
Vulnerability details
Impact
Consider introducing upper limits for PHASE_ONE_DURATION and PHASE_TWO_DURATION so that a flat finger error would not cause serious harm when initializing new events.
Also, there should probably be a reasonable upper limit for _phaseOneStartTime, as now the user can pass any value, but I think a start time in 50 years should not make sense.