mirror of
https://github.com/mozilla/pdf.js.git
synced 2026-07-25 08:27:19 +02:00
c7dc7d7dd0
Address two CodeQL findings on the per-test index downloader: - "File data in outbound network request": validate the cached ETag against the RFC 7232 grammar before sending it as If-None-Match, so the cache file's contents can't be injected into the request header. - "Network data written to file": cache the re-serialized JSON (JSON.stringify(JSON.parse(...))) instead of the raw response body, so only well-formed JSON produced by our own serializer is written.