Skip to content

refactoring #525

Open
DigitaleZukunft wants to merge 1 commit intoaeternity:masterfrom
DigitaleZukunft:refactoring
Open

refactoring #525
DigitaleZukunft wants to merge 1 commit intoaeternity:masterfrom
DigitaleZukunft:refactoring

Conversation

@DigitaleZukunft
Copy link
Copy Markdown

refactoring

…d atom labels in ACI; validate call injection inputs

- Lexer: replace list_to_atom with list_to_existing_atom fallback to safe tag to prevent atom exhaustion
- Include: restrict path traversal and absolute includes while allowing safe relatives under allowed roots
- ACI: use binary labels in jsx:decode to avoid creating atoms from untrusted JSON
- Call injector: add basic validation for names and single-line args/types/values to reduce injection surface

Dialyzer: clean
Tests: 565 tests, 0 failures
Copy link
Copy Markdown
Member

@hanssv hanssv left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the PR, it seems to contain a lot of useful stuff, both w.r.t documentation and code structure. But there is also things that seems entirely unrelated like a script for counting lines of code, and adding erlscripten as a sub-directory.

I think this PR needs to be split into more sizeable chunks in order to be accesible for reviewers. Preferrably should each PR tackle one issue, and not result in 4k lines of codes changed 😅

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants