Closed amirhajimirsadeghi closed 7 years ago
@kintner fixed, what do you think?
Just a small style nit:
def self.inflate(data)
inflater = Zlib::Inflate.new(-Zlib::MAX_WBITS)
decoded = inflater.inflate(data)
inflater.finish
inflater.close
decoded
rescue Zlib::BufError, Zlib::DataError
nil
end
@kintner 💇
@zendesk/secdev
Description
Invalid Logout Requests would throw exceptions, fixed so that it responds with nil now
Risk
None: Just added a layer of protection where Exceptions were being thrown