@componentor/fs 3.0.14 → 3.0.15
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +7 -0
- package/dist/index.js.map +1 -1
- package/dist/workers/async-relay.worker.js.map +1 -1
- package/dist/workers/server.worker.js +7 -0
- package/dist/workers/server.worker.js.map +1 -1
- package/dist/workers/sync-relay.worker.js +25 -2
- package/dist/workers/sync-relay.worker.js.map +1 -1
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -570,6 +570,13 @@ Make sure `opfsSync` is enabled (it's `true` by default). Files are mirrored to
|
|
|
570
570
|
|
|
571
571
|
## Changelog
|
|
572
572
|
|
|
573
|
+
### v3.0.15 (2026)
|
|
574
|
+
|
|
575
|
+
**Fixes:**
|
|
576
|
+
- Add bounds validation to `decodeRequest` — rejects truncated SAB payloads instead of reading out-of-bounds
|
|
577
|
+
- Wrap `decodeRequest` in try/catch in both VFS and OPFS leader loop handlers — corrupt buffers return `status: -1` instead of crashing the leader loop
|
|
578
|
+
- Guard `readPayload` against zero/negative/overflow chunk lengths from stale SAB data
|
|
579
|
+
|
|
573
580
|
### v3.0.14 (2026)
|
|
574
581
|
|
|
575
582
|
**Fixes:**
|