safe-global / safe-client-gateway / 26282493692

Pull #3018

github

fix(queue): harden cross-chain and origin handling end-to-end

Defend the queue-service integration against malformed or cross-chain data:
- Cap originName length, require https + size cap on originUrl from the queue,
  and coerce bad rows to null so a single poisoned row cannot invalidate a
  whole batch.
- Cap origin length on inbound transaction/message DTOs.
- Reject queue origin overrides when the queue record reports a different
  chainId or safe than the request; log and fall back to tx-service origin.
- Return 404 (with a warn log) instead of a 500 when the queue returns a
  message for a different chainId than requested.
- Map missing payment field on queue-to-multisig conversion.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

4319 of 5199 branches covered (83.07%)

Branch coverage included in aggregate %.

384 of 421 new or added lines in 34 files covered. (91.21%)

16461 of 17961 relevant lines covered (91.65%)

568.53 hits per line