ReviewOS

stacks/ts-analytics

Custom-event property values unbounded (no length cap)

#134
Closed glennmichael123 opened this 9 days ago ·
9 days ago

Severity: Medium · Where: collect.ts:250-254, serialized at orm/index.ts:590 Props are type-filtered but never length-capped before storage. Impact: Write amplification / oversized items. Fix: Clamp key/value lengths and prop count.

Sign in to comment on this issue.