contrail/packages/contrail-base/src/spaces/ at feat/another-big-refactor · flo-bit.dev/contrail · Tangled

flo-bit.dev / contrail

0

[READ-ONLY] Mirror of https://github.com/flo-bit/contrail. atproto backend in a bottle flo-bit.dev/contrail/

0

contrail / packages / contrail-base / src / spaces /

at feat/another-big-refactor 10 files

Tom Scanlan fix(spaces): schema-validate PDS-record declarations 3mo ago

uff, split stuff up

4 months ago

uff, split stuff up

4 months ago

fix(spaces): schema-validate PDS-record declarations The PDS binding resolver trusted body.value.authority on any record returned for the space's URI, with only a startsWith('did:') sniff. A malformed or attacker-shaped record at the same NSID could rebind authority — record content alone, no signature verification. Validate before trusting: - $type must equal the URI's type (the space-type lexicon embeds the declaration fields per tools.atmo.space.declaration's contract) - createdAt must be a string - authority must match a strict did:plc | did:web regex Fail closed on any deviation. Adds three negative tests covering each deviation path.

3 months ago

blob-adapter.ts

uff, split stuff up

4 months ago

uff, split stuff up

4 months ago

uff, split stuff up

4 months ago

phase 7d?

4 months ago

uff, split stuff up

4 months ago

phase 7c

4 months ago

uff, split stuff up

4 months ago