Repository navigation
Fix: Hardening followups - #939
Merged
Merged
Conversation
String keys accept $ again, so existing token classes with $ in a key field keep working. A NUL-wrapped key part is accepted only when it is a well-formed nested composite key. A burn query with created must include every preceding key field. Oracle authorities must be user aliases. Co-Authored-By: Claude Opus 5.5 <[email protected]>
A call routed to the default contract without a Contract: prefix gets the same operation id clients sign. Expired swap cleanup skips index entries that are already gone. A fulfillment for another owner in the same transaction is kept as its own record. A grant that would overwrite an unused allowance from the same transaction is rejected. Mint supply uses the smallest baseline among records with the same time key. The external invocation guard normalizes name/channel targets and empty channels. Co-Authored-By: Claude Opus 5.5 <[email protected]>
The EIP-712 domain name follows the same network rule as the chaincode. Adding a wallet signature to a multisig DTO reuses its types, domain and prefix. Object arrays merge the fields of every element, and identical nested types may repeat. FetchTokenClassesWithSupply is unsigned. The request timeout covers the response body, with a size limit and caller abort signal. ethereumToGalaChainAddress replaces only a leading 0x, and examples no longer log secrets. Co-Authored-By: Claude Opus 5.5 <[email protected]>
A response without a valid status is an error, not a success. Private keys are accepted as hex, 0x-hex or base64. The connection profile is checked before the Fabric client uses it. REST contracts are unique per chaincode, and a repeated path fragment on a channel is rejected. Co-Authored-By: Claude Opus 5.5 <[email protected]>
…ames Key arguments must be key files, and parse errors do not print the input. dto:sign checks a signer address or public key in the DTO against the signing key. Version checks follow semver precedence and use the running CLI version. network-up rejects channels that collide with built-in profiles, and api-config rejects a repeated path fragment. FetchTrees defaults its page size, and the unpaginated FetchBalances is marked deprecated. Co-Authored-By: Claude Opus 5.5 <[email protected]>
FetchBalances accepts a page size and a bookmark. A string-key part may use $ only as its first character, so aaa and $bb stay distinct from a part that contains $ later. Co-authored-by: Cursor <[email protected]>
Co-authored-by: Cursor <[email protected]>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.