Skip to content

data-integrity: reject exotic objects in editor document snapshots #225

Description

@seonghobae

Current authoritative state

This exotic-container defect is repaired on canonical Draft PR #218 / fix/document-snapshot-cycle-217. Protected shipped truth remains main@3b38ead2d00f44eb578d0689087b9293b3dabe1e; current exact Draft head is eafd5462db71654e7fa85fd3aa8804d7c51c55f6, 23 ahead / 0 behind from that exact merge base with only four intended snapshot files changed.

Current validation accepts arrays and plain/null-prototype objects (including compatible cross-realm plain objects) and rejects Date/Map/custom-class/exotic containers through stable payload-redacted errors. Representative RED is 7a5d60472bddd98a3d4f9da547463ab1d29e3bdf. Exact-head CI 32101276070, Security 32101276077, and SAST 32101276001 are completed / success; formal submitted reviews are 0.

The repair is active-PR truth only. Keep #218 Draft/unmerged while #118 owns v0.6.0 operational acceptance and independent latest-push approval plus every applicable central gate remain incomplete. Do not create a competing snapshot writer, transfer predecessor evidence, self-approve, weaken gates, move protected main, or fabricate release identity.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area: authAuthentication, authorization, identity, or tenant isolationarea: ci-cdCI, GitHub Actions, checks, release, or supply chainarea: operationsOperability, observability, readiness, SLO, backup, or retentionarea: securitySecurity boundary, hardening, or vulnerability preventionpriority: mediumNormal-priority or P2 workstatus: triagedOpen issue has an organization taxonomy assignmenttype: featureNew or expanded product capability

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions