Skip to content

Security: WebSocket Data Integrity#2921

Closed
ghost wants to merge 60 commits into
mainfrom
unknown repository
Closed

Security: WebSocket Data Integrity#2921
ghost wants to merge 60 commits into
mainfrom
unknown repository

Conversation

@ghost

@ghost ghost commented May 2, 2026

Copy link
Copy Markdown

Summary

This PR improves the security and stability of the real-time WebSocket feed by ensuring all broadcasted data is properly sanitized and type-casted.

Changes

  1. Data Sanitization: Added string conversion and length limits for and before broadcasting them to WebSocket clients. This prevents potentially malformed or oversized data from being pushed to the frontend.
  2. Type Enforcement: Enforced explicit type casting for numeric fields (, ) and IDs to ensure downstream consumers receive consistent data shapes.
  3. Robustness: Reduces the risk of frontend crashes or exploitation via injected WebSocket payloads.

Closes #2295

Michael Sovereign added 30 commits April 12, 2026 16:30
MichaelSovereign added 21 commits May 2, 2026 06:41
…o prevent replay during potential state drifts
…d X-Forwarded-Host header in feed builders
… PDF generator to prevent misleading certificates
@ghost ghost requested a review from Scottcjn as a code owner May 2, 2026 05:53
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related tests Test suite changes size/XL PR: 500+ lines labels May 2, 2026
@Scottcjn

Scottcjn commented May 3, 2026

Copy link
Copy Markdown
Owner

Closing as part of Tier 0 hard-ban cleanup — see #3074 / #3104 / #3169 for the documented incident chain. All MichaelSovereign PRs are closed unread per the Tier 0 contract. No review path; no future PRs from this account will be processed. (See feedback_michaelsovereign_tier0_2026-05-02.md.)

@Scottcjn Scottcjn closed this May 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) BCOS-L2 Beacon Certified Open Source tier BCOS-L2 (required for non-doc PRs) consensus Consensus/RIP-200 related node Node server related size/XL PR: 500+ lines tests Test suite changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant