hummingbird-project / hummingbird

Lightweight, flexible HTTP server framework written in Swift
Apache License 2.0
1.16k stars 53 forks source link

Fix for decoding closed ranges from URL Encoded Forms #543

Closed adam-fowler closed 1 month ago

adam-fowler commented 1 month ago

Unkeyed containers didn't range check the array index when decoding a value.

This is the same issue as was fixed in Vapor recently https://github.com/vapor/vapor/pull/3226

ClosedRange.init(from:) does no range checking when decoding. It assumes the decoder will do the decoding