Ameer Assadi 945435fc51 fix(node): enforce maxContentLength for data: URLs (#7011) ...

* fix(node): enforce maxContentLength for data: URLs (pre-decode size check)- CVE-2025-58754

* feat(utils): add estimateDataURLDecodedBytes helper and fix duplicate condition in base64 padding check

* feat: add estimateDataURLDecodedBytes helper with tests

2025-09-10 15:08:43 +02:00

..

adapters

fix(node): enforce maxContentLength for data: URLs (#7011)

2025-09-10 15:08:43 +02:00

cancel

fix(fetch): optimize signals composing logic; (#6582)

2024-08-30 21:26:12 +03:00

core

feat(fetch): add fetch, Request, Response env config variables for the adapter; (#7003)

2025-08-30 22:02:24 +03:00

defaults

feat: support reviver on JSON.parse (#5926)

2025-08-12 09:34:42 +02:00

env

chore(release): v1.11.0 (#6974)

2025-07-23 08:04:30 +02:00

helpers

fix(node): enforce maxContentLength for data: URLs (#7011)

2025-09-10 15:08:43 +02:00

platform

fix(utils): move generateString to platform utils to avoid importing crypto module into client builds; (#6789)

2025-02-26 10:30:55 +02:00

axios.js

Revert "chore: expose fromDataToStream to be consumable (#6731)" (#6732)

2024-12-06 11:30:15 +02:00

utils.js

fix(node): enforce maxContentLength for data: URLs (#7011)

2025-09-10 15:08:43 +02:00