claude code agent 227 2b4ec0bfcc fix(share-ai): reject non-text message parts to close size-cap bypass (#63) ...

MAX_SHARE_MESSAGE_CHARS only counted text parts, so a forged non-text part
(tool-result/file/data) bypassed the cap and bloated the model input
(token-DoS); convertToModelMessages would also expand a forged tool-result. The
anonymous path runs no tools, so a client non-text part is never legitimate —
reject any message with a non-text part (isTextUIPart) before the size check.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-21 03:07:53 +03:00

..

client

Merge develop into fix/page-template-demo-issues (#45)

2026-06-21 01:51:09 +03:00

server

fix(share-ai): reject non-text message parts to close size-cap bypass (#63)

2026-06-21 03:07:53 +03:00