Paul HittandClaude Opus 4.8 e435cd710d Audit M5: cap the attachment download at its declared size ...

Header and read both bounded — contentLength is -1 on a chunked reply,
so trusting it alone would leave the hole open. Same reasoning as iOS:
the size came through the ratchet, so the relay cannot inflate it.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-08-29 08:44:25 -04:00

..

src

Audit M5: cap the attachment download at its declared size

2026-08-29 08:44:25 -04:00

build.gradle.kts

Kotlin: the relay transport

2026-08-23 15:37:59 -04:00