Quratulain-bilal c1bceb625c fix: use bounded read for bundle download HTTP responses (#3764) ...

* fix: use bounded read for bundle download HTTP responses

The bundle download used unbounded resp.read() to read HTTP responses
into memory. A malicious or misconfigured catalog server could return
an arbitrarily large payload causing OOM.

Replace with read_response_limited() capped at MAX_DOWNLOAD_BYTES
(50 MiB), consistent with how other download paths in the codebase
enforce bounded reads.

Add regression test that monkeypatches MAX_DOWNLOAD_BYTES to 100 bytes
and verifies oversized responses are rejected.

* fix: remove duplicate import of MAX_DOWNLOAD_BYTES and read_response_limited

2026-08-12 08:29:36 -05:00

..

test_bundle_cli.py

fix: use bounded read for bundle download HTTP responses (#3764)

2026-08-12 08:29:36 -05:00

test_catalog_schema.py

harden: secure extension and preset archive downloads (#3141)

2026-07-28 07:52:07 -05:00

test_manifest_schema.py

fix(bundler): treat an explicit-null manifest field as missing, not the text "None" (#3798)

2026-07-29 08:40:26 -05:00

test_wheel_bundled_presets.py

feat(presets): add opt-in constitution-sync preset (#3873)

2026-07-30 13:36:13 -05:00

test_wheel_core_pack_scripts.py

fix(packaging): bundle scripts/python into the wheel core_pack (#3665) (#3670)

2026-07-22 14:50:19 -05:00