dunglas / mercure / 24129743143

84%

master: 93%

push

github

Merge commit from fork

Replace string-encoded cache keys with typed Go struct keys to prevent
cache poisoning via crafted topic names containing underscore separators.

Also removes the redundant sharded cache abstraction (TopicSelectorStoreCache
interface, shardedCache, xxhash sharding) in favor of direct otter.Cache usage,
resulting in simpler code and ~38% faster subscriber list matching.

CWE-1289: Improper Validation of Unsafe Equivalence in Input
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

26 of 32 new or added lines in 3 files covered. (81.25%)

1729 of 2059 relevant lines covered (83.97%)

48.88 hits per line