Files
Filip SkokanandYarchik 74641a241c fix: reject characters outside the Base64URL alphabet
The fallback path translated "-" and "_" into "+" and "/" and handed the
result to atob, which accepts them, so "a+b/" decoded as an alias instead
of being rejected on runtimes without Uint8Array.fromBase64.

Closes: #879
Co-authored-by: Yarchik <[email protected]>
Signed-off-by: Filip Skokan <[email protected]>
2026-07-28 14:10:04 +02:00
..