Xvvln 7333619f15 fix: reject oversized downloads instead of truncating; warn on unverified fallback ...

- Read maxAssetDownloadSize+1 bytes and error if exceeded, preventing
  silent truncation that could write a broken management.html to disk
- Log explicit warning when fallback URL is used without digest
  verification, so users are aware of the reduced security guarantee

2026-03-24 00:27:44 +08:00

13 KiB

Raw Blame History

View Raw