security: bound unpack resize-before-read and harden producer HTTP - #4

Draft

igorls wants to merge 5 commits into

release/1.2.3-alpha2from

cursor/unpack-bounds-producer-http-82b1

Commits on Sep 16, 2026

security: bound fc::raw container unpack and harden producer HTTP

cursoragent
and
igorls
committed
8c78d3e
test: pack notice_message mode as the real 4-byte enum

cursoragent
and
igorls
committed
ce7f450

Commits on Sep 17, 2026

test: avoid ambiguous sha256::hash(string literal)

cursoragent
and
igorls
committed
8d5ed0a
fix: default-initialize unpack bound dummy (explicit ctors)

cursoragent
and
igorls
committed
1b495e8

Commits on Sep 18, 2026

fix: throw out_of_range on unpack bound; read CORS from options

cursoragent
and
igorls
committed
b6a8af8