ipld / specs

Content-addressed, authenticated, immutable data structures
Other
592 stars 108 forks source link

DAG-CBOR: strictly only allow a single top-level CBOR object #268

Closed rvagg closed 4 years ago

rvagg commented 4 years ago

The streaming form of CBOR (3.1) may use back-to-back top-level objects, we should rule this out as a valid form for DAG-CBOR and require a single, explicit top-level object.

Ref: https://github.com/dignifiedquire/borc/issues/47#issuecomment-642432759 (borc doesn't reject this form of data as it inherited from an implementation that handled streaming data and the looseness was left in).