Fix security vulnerabilities

2026-10-13 15:52:34 +01:00
parent 74103a19c9
commit eefb2ea5d2
46 changed files with 375 additions and 403 deletions
@@ -1,6 +1,9 @@
-export default function grabCacheNames({ key, paradigm = "html" }) {
-    const parsed_key = encodeURIComponent(key);
+export default function grabCacheNames({ key, cache_id, paradigm = "html", }) {
+    // Hashing keeps file names short and fixed-length no matter how long
+    // the request path or query string is.
+    const parsed_key = cache_id ||
+        new Bun.CryptoHasher("sha256").update(key || "").digest("hex");
    const cache_name = `${parsed_key}.res.${paradigm}`;
    const cache_meta_name = `${parsed_key}.meta.json`;
-    return { cache_name, cache_meta_name };
+    return { cache_id: parsed_key, cache_name, cache_meta_name };
 }