fix(scripts): reject unsafe bounded response lengths · op...
vincentkoc
·
2026-06-20
·
via Recent Commits to openclaw:main
| Original file line number | Diff line number | Diff line change |
|---|
@@ -19,7 +19,7 @@ function parseContentLengthHeader(headers) {
|
19 | 19 | return undefined; |
20 | 20 | } |
21 | 21 | const parsed = Number(raw); |
22 | | -return Number.isSafeInteger(parsed) ? parsed : undefined; |
| 22 | +return Number.isSafeInteger(parsed) ? parsed : Number.POSITIVE_INFINITY; |
23 | 23 | } |
24 | 24 | |
25 | 25 | async function readResponseChunk(reader, label, signal, markCanceled) { |
|
| Original file line number | Diff line number | Diff line change |
|---|
@@ -23,7 +23,7 @@ function parseContentLengthHeader(headers: Headers): number | undefined {
|
23 | 23 | return undefined; |
24 | 24 | } |
25 | 25 | const parsed = Number(raw); |
26 | | -return Number.isSafeInteger(parsed) ? parsed : undefined; |
| 26 | +return Number.isSafeInteger(parsed) ? parsed : Number.POSITIVE_INFINITY; |
27 | 27 | } |
28 | 28 | |
29 | 29 | async function readResponseChunk( |
|
| Original file line number | Diff line number | Diff line change |
|---|
@@ -98,4 +98,39 @@ describe("scripts bounded response reader", () => {
|
98 | 98 | expect(canceled).toBe(true); |
99 | 99 | }, |
100 | 100 | ); |
| 101 | + |
| 102 | +it.each(helpers)( |
| 103 | +"rejects unsafe decimal %s content-length values before reading", |
| 104 | +async (_name, read) => { |
| 105 | +let readStarted = false; |
| 106 | +let canceled = false; |
| 107 | +const response = { |
| 108 | +headers: new Headers({ "content-length": "9007199254740993" }), |
| 109 | +body: { |
| 110 | +async cancel() { |
| 111 | +canceled = true; |
| 112 | +}, |
| 113 | +getReader() { |
| 114 | +return { |
| 115 | +async read() { |
| 116 | +readStarted = true; |
| 117 | +return new Promise<ReadableStreamReadResult<Uint8Array>>(() => {}); |
| 118 | +}, |
| 119 | +async cancel() { |
| 120 | +canceled = true; |
| 121 | +}, |
| 122 | +releaseLock() {}, |
| 123 | +}; |
| 124 | +}, |
| 125 | +}, |
| 126 | +} as unknown as Response; |
| 127 | + |
| 128 | +await expect(read(response, "probe", 16)).rejects.toThrow( |
| 129 | +"probe response body exceeded 16 bytes", |
| 130 | +); |
| 131 | + |
| 132 | +expect(readStarted).toBe(false); |
| 133 | +expect(canceled).toBe(true); |
| 134 | +}, |
| 135 | +); |
101 | 136 | }); |
此内容由惯性聚合(RSS阅读器)自动聚合整理，仅供阅读参考。 原文来自 — 版权归原作者所有。
