Reject whitespace in armor without relying on scure-base

FiloSottile · FiloSottile · commit cdb058a86eea · 2025-04-26T13:58:16.000+02:00
See paulmillr/scure-base#39.
diff --git a/lib/armor.ts b/lib/armor.ts
@@ -50,5 +50,8 @@ export function decode(file: string): Uint8Array {
     if (!lines.every((l, i) => isLineLengthValid(i, l))) {
         throw Error("invalid line length")
     }
+    if (!lines.every((l) => /^[A-Za-z0-9+/=]+$/.test(l))) {
+        throw Error("invalid base64")
+    }
     return base64.decode(lines.join(""))
 }

Original file line number	Diff line number	Diff line change
`@@ -50,5 +50,8 @@ export function decode(file: string): Uint8Array {`
`50`	`50`	`if (!lines.every((l, i) => isLineLengthValid(i, l))) {`
`51`	`51`	`throw Error("invalid line length")`
`52`	`52`	`}`
	`53`	`+ if (!lines.every((l) => /^[A-Za-z0-9+/=]+$/.test(l))) {`
	`54`	`+ throw Error("invalid base64")`
	`55`	`+ }`
`53`	`56`	`return base64.decode(lines.join(""))`
`54`	`57`	`}`