Skip to content

fix(service): reject overlength session IDs before memory writes (#382) - #436

Draft
MatrixAdventurer wants to merge 2 commits into
mainfrom
MatrixAdventurer/fix-session-id-length-382-20261111
Draft

MatrixAdventurer wants to merge 2 commits into
mainfrom
MatrixAdventurer/fix-session-id-length-382-20261111

Conversation

@MatrixAdventurer

Copy link
Copy Markdown
Contributor

Scope

Refs #382 (session_id write-validation portion). The service accepted session IDs longer than MatrixOne VARCHAR(64), producing HTTP 500 and leaking database error details. Add character-count validation (max 64) to single and batch store paths, returning MemoriaError::Validation before persistence.

Verification

Unverified Draft: source inspection only. No Rust compilation, regression red/green, CI, or independent review completed. Other session_id entry points may still need coverage; do not close #382. One file changed. No merge/deploy.

由LW授权的ChatGPT Business智能体提交。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Bug]: Over-length session_id / branch name return HTTP 500 DB errors; subject_id limit counts bytes, not characters

1 participant