jcreek/CosmicClash
1
0
Fork 0
mirror of https://github.com/jcreek/CosmicClash.git synced 2026-09-11 16:33:43 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(multiplayer): validate event timestamps

Browse Source
This commit is contained in:
Josh Creek
2026-09-01 22:21:18 +01:00
parent 73e5d64ba2
commit 87d43302e1
3 changed files with 17 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
multiplayer-next.md
+2
View File
@@ -1560,3 +1560,5 @@ Ticket projections now validate playlist metadata on every update, rejecting unk
Client sessions now fail closed at the expiry boundary and proactively clear credentials before reconnects or authenticated requests. Boundary and malformed-expiry tests cover the lifecycle guard.
Queue heartbeat and cancellation revision conflicts now schedule the same authoritative ticket recovery as proposal conflicts, preventing stale client actions from leaving the visible queue state unresolved. Adversarial operation/status/identity coverage is included.
WebSocket event envelopes now require RFC3339 timestamps rather than merely non-empty text, matching the versioned contract; session-expiry format checks use the same boundary validator. Malformed-format adversarial coverage is included.