安正超 1838922f07 fix(security): add deny_unknown_fields to deserialization structs (#3198) ...

* fix(security): add deny_unknown_fields to deserialization structs

Prevent silent acceptance of malformed or adversarial payloads.

- policy: Policy, BucketPolicy, Statement, BPStatement, PrincipalObject
- notify: S3KeyFilter custom deserializer rejects unknown child elements
- update: VersionInfo (remote HTTP response)

26 policy + 82 notify tests pass.

* fix(update): keep version response forward compatible

---------

Co-authored-by: houseme <housemecn@gmail.com>

2026-06-03 15:33:28 +00:00

..

config_test.rs

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

config.rs

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

mod.rs

fix(notify): Fix XML Filter parsing and add comprehensive tests (#2191)

2026-03-17 23:08:07 +08:00

pattern_rules_test.rs

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

pattern_rules.rs

Fix notification event stream cleanup, add bounded send concurrency, and reduce overhead (#1224)

2025-12-22 00:57:05 +08:00

pattern_test.rs

fix(notify): Fix XML Filter parsing and add comprehensive tests (#2191)

2026-03-17 23:08:07 +08:00

pattern.rs

chore: upgrade dependencies and migrate to aws-lc-rs (#1333)

2026-01-02 00:02:34 +08:00

rules_map.rs

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

subscriber_index.rs

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

subscriber_snapshot.rs

refactor(s3): consolidate semantic boundaries and remove s3-common (#3012)

2026-05-19 12:50:25 +00:00

target_id_set.rs

chore: improve event and docker-compose ,Improve the permissions of the endpoint health interface, upgrade otel from 0.30.0 to 0.31.0 (#620)

2025-10-11 09:08:25 +08:00

xml_config.rs

fix(security): add deny_unknown_fields to deserialization structs (#3198)

2026-06-03 15:33:28 +00:00