Edgar ArakelyanandClaude Opus 5.5 22a93fadc4 fix: fail saves from malformed UTF-8, and bound secret spellings before building them ...

A saving response is decoded as fatal UTF-8 in both the request step and a UI
step's save_response, so a malformed byte fails the step instead of saving
U+FFFD in its place.

A secret save first counts a lower bound on its redaction spellings from the
value alone (it and its longer percent-encoded spelling), and refuses there
when that cannot fit, before any spelling is built.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-26 12:49:32 -07:00

..

adb

fix(adb): preserve process names and pin fixture interpreters

2026-10-26 23:50:10 +08:00

android

fix(providers): keep operation environments consistent through launch

2026-10-27 00:25:43 +08:00

apkSignature

refactor(artifacts): centralize completed snapshot observations

2026-10-27 01:27:03 +08:00

apktool

…

application

Merge main dd7a2da5 into feat/recorder-saved-values

2026-10-26 12:40:56 -07:00

artifacts

fix(asar): disclose unverified block integrity

2026-10-27 03:29:05 +08:00

browser

fix: fail saves from malformed UTF-8, and bound secret spellings before building them

2026-10-26 12:49:32 -07:00

captures

…

cli

fix(evidence): exclude sensitive publication identities

2026-10-27 03:12:22 +08:00

composition

…

compression

…

config

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

contracts

chore: remove unused internal exports

2026-10-27 03:02:38 +08:00

cutter

…

domain

Merge main dd7a2da5 into feat/recorder-saved-values

2026-10-26 12:40:56 -07:00

dotnet

fix(managed): unify metadata row and coded-index ownership

2026-10-27 02:46:26 +08:00

electron

fix(artifacts): complete positional reads across short results

2026-10-27 03:07:24 +08:00

erlang

refactor(artifacts): unify stable read failure ownership

2026-10-27 03:02:05 +08:00

evm

fix(providers): keep each inspection on one environment snapshot

2026-10-27 02:35:54 +08:00

filesystem

fix(filesystem): finish executable and project span reads

2026-10-27 03:14:14 +08:00

firmware

refactor(artifacts): unify stable read failure ownership

2026-10-27 03:02:05 +08:00

flutter

refactor(elf): consolidate bounded string-table interpretation

2026-10-27 01:46:08 +08:00

frida

…

gdb

…

ghidra

refactor(ghidra): consolidate function and inventory admission

2026-10-26 23:27:43 +08:00

go

refactor(artifacts): unify stable read failure ownership

2026-10-27 03:02:05 +08:00

gpu

…

hopper

fix(filesystem): finish executable and project span reads

2026-10-27 03:14:14 +08:00

ida

refactor(providers): consolidate IDA and JEB MCP result admission

2026-10-26 22:30:58 +08:00

il2cpp

…

inspector

fix(browser): unify script and context attribution facts

2026-10-27 02:30:04 +08:00

javascript

fix(workers): reject malformed UTF-8 in JSON result files

2026-10-27 00:28:42 +08:00

jeb

refactor(providers): consolidate IDA and JEB MCP result admission

2026-10-26 22:30:58 +08:00

kuna

fix(filesystem): finish executable and project span reads

2026-10-27 03:14:14 +08:00

main

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

model

…

native

fix(filesystem): complete plist and limits probes

2026-10-27 03:18:56 +08:00

objdump

…

pcap

fix(pcap): capture provider environment once

2026-10-26 23:21:57 +08:00

process

fix(filesystem): complete plist and limits probes

2026-10-27 03:18:56 +08:00

providers

refactor(providers): consolidate IDA and JEB MCP result admission

2026-10-26 22:30:58 +08:00

python

refactor(artifacts): unify stable read failure ownership

2026-10-27 03:02:05 +08:00

reference

…

rizin

…

rust

refactor(artifacts): unify stable read failure ownership

2026-10-27 03:02:05 +08:00

server

refactor(mcp): consolidate evidence tool execution

2026-10-27 03:14:24 +08:00

signals

fix(providers): bind signal and capture configuration per operation

2026-10-27 02:47:25 +08:00

sqlite

fix(sqlite): preserve completed member facts on acquisition failure

2026-10-27 02:02:27 +08:00

wasm

fix(providers): keep operation environments consistent through launch

2026-10-27 00:25:43 +08:00

windows

…

catalogIdentity.ts

…

cli.ts

…

cliBrowserScenarioCommands.ts

…

cliBuiltinArguments.ts

…

cliBundleResource.test.ts

…

cliCommandNames.ts

…

cliConfiguration.ts

…

cliEvidenceCommands.ts

…

cliHostInputs.test.ts

…

cliJsonInput.ts

…

cliJsonPaths.test.ts

…

cliLogging.ts

…

cliObservationOptions.ts

…

cliOutput.ts

…

config.test.ts

…

doctorRuntime.test.ts

…

doctorRuntime.ts

…

generatedPackageMetadata.ts

…

homeDirectory.test.ts

…

identity.ts

…

logger.ts

…

main.ts

fix(mcp)!: require allowed hosts for non-loopback HTTP binds (#7172)

2026-10-26 22:55:10 +08:00

mcpDoctor.ts

…

mcpStartupPolicy.test.ts

…

mcpStartupPolicy.ts

…

nativeDeadlineFlags.test.ts

…

recordedCatalogDigests.ts

…

recordedMcpCatalog.ts

…

serverIdentity.ts

…

setupEnvironment.test.ts

…