orion-ecs / keen-eye / 20632568471

65%

push

github

fix: Address security vulnerabilities and code quality issues

Security fixes:
- Add size validation to SnapshotManager to prevent DoS via memory exhaustion
- Add string table index bounds checking to prevent out-of-bounds access
- Add decompression bomb protection to SaveFileFormat with size limits
- Replace Activator.CreateInstance with AOT-compatible factory delegates

Code quality fixes:
- Improve ToCamelCase to handle acronyms (XMLParser → xmlParser)
- Improve ToCamelCase to handle all-caps (HTTP → http)
- Improve ToCamelCase to handle numeric prefixes (2D stays 2D)
- Fix FloatEqualityAnalyzer false positive on literal-to-literal comparisons

Addresses issues #479, #485, and findings from nightly review #604

4820 of 5422 branches covered (88.9%)

Branch coverage included in aggregate %.

39 of 58 new or added lines in 5 files covered. (67.24%)

30680 of 35139 relevant lines covered (87.31%)

1.19 hits per line