Files
mattgodbolt-molty d9e41baf86 Cap conan package extraction size; require http(s) package URLs
Simple hygiene per #8817 - the conan server is our own, so these are
sanity bounds rather than attack mitigations: a generous 2GiB cap on
total declared extracted bytes (real packages are at most a few hundred
MiB), and a scheme check on the URL conan hands back. Deliberately no
redirect restrictions or configurable limits.

Fixes #8817.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
2026-06-11 16:19:21 -05:00
..
2021-10-05 01:45:05 +02:00
2019-08-21 01:26:16 +02:00
2025-01-29 10:41:03 -06:00
2021-09-13 20:22:27 +02:00
2024-10-27 15:28:38 +02:00
2024-10-26 17:42:22 +02:00
2024-03-08 22:25:09 -06:00
2024-03-08 22:25:09 -06:00
2024-03-08 22:25:09 -06:00
2026-02-08 12:50:20 +01:00
2024-03-08 22:25:09 -06:00
2024-03-08 22:25:09 -06:00
2025-07-28 10:34:46 -05:00