search

eclipse / kuksa.val

kuksa.val
Apache License 2.0
89 stars 52 forks source link

LOW-5 Malicious JWT access token can crash a thread of the databroker #750

Closed lukasmittag closed 3 months ago

lukasmittag commented 4 months ago

use safe addition checked_add in decoder.rs to catch overflows and do not panic. Instead returning ClaimsError.

rafaeling commented 3 months ago

Code looks good, some unit test would be good