google / OpenSK / 39498422590

97%

2.1: 97%

push

github

Reject empty or oversized RP IDs in the setMinPINLength parameters (#807)

The minPinLengthRPIDs entries are defined as fully qualified domain
names, which RFC 1035 limits to 253 bytes in presentation format.

Empty or longer strings are currently accepted while parsing and only
rejected later, when storing the list fails because the serialized value
exceeds the maximum value size of the persistent store, after the token
permissions were already checked.

Reject such entries while parsing, matching the checks that
MakeCredential performs on its RP ID.

Co-authored-by: 17krishna8 <17krishna8@users.noreply.github.com>

36 of 36 new or added lines in 1 file covered. (100.0%)

14329 of 14716 relevant lines covered (97.37%)

4070.29 hits per line