websockets / ws / 43397568761

100%

push

github

[fix] Reject non-decimal window bits values (#2355)

The `server_max_window_bits` and `client_max_window_bits` values were
validated with `Number.isInteger()`, so values like `010`, `0xa`, `1e1`,
`10.0`, and `+10` were accepted. RFC 7692 specifies that these values
must be decimal integers between 8 to 15 without leading zeros,
conforming to the 1*DIGIT ABNF rule.

1154 of 1160 branches covered (99.48%)

5 of 5 new or added lines in 1 file covered. (100.0%)

1688 of 1689 relevant lines covered (99.94%)

49149.4 hits per line