Production report endpoints receive attacker-controlled payloads, but collector.Handler currently reads…
Production report endpoints receive attacker-controlled payloads, but collector.Handler currently reads…: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). Keep the exported signature exactly func Handler(func(Report), func(CSPReport)) safehttp.Handler . Validation…
The task
Keep the exported signature exactly `func Handler(func(Report), func(CSPReport)) safehttp.Handler`. Validation order is observable: reject non-POST requests with 405 before inspecting their Content-Type or body; then parse Content-Type using MIME media-type rules. The two supported media types are…
Part of FineEnvs/MiMo-V2.6-RL-harbor-code.