From 89f7ec9d7bf5e9356ba4961e98d866f2ef491d03 Mon Sep 17 00:00:00 2001 From: Nyannyacha Date: Mon, 22 Jun 2026 22:22:09 +0000 Subject: [PATCH] fix(deno_telemetry): guard against malformed URLs when parsing baggage headers --- vendor/deno_telemetry/telemetry.ts | 25 +++++++++++++++---------- 1 file changed, 15 insertions(+), 10 deletions(-) diff --git a/vendor/deno_telemetry/telemetry.ts b/vendor/deno_telemetry/telemetry.ts index 119e089cf..3c74b0c75 100644 --- a/vendor/deno_telemetry/telemetry.ts +++ b/vendor/deno_telemetry/telemetry.ts @@ -1515,16 +1515,21 @@ function parsePairKeyValue( BAGGAGE_KEY_PAIR_SEPARATOR, ); if (separatorIndex <= 0) return; - const key = decodeURIComponent( - StringPrototypeTrim( - StringPrototypeSubstring(keyPairPart, 0, separatorIndex), - ), - ); - const value = decodeURIComponent( - StringPrototypeTrim( - StringPrototypeSubstring(keyPairPart, separatorIndex + 1), - ), - ); + let key, value; + try { + key = decodeURIComponent( + StringPrototypeTrim( + StringPrototypeSubstring(keyPairPart, 0, separatorIndex), + ), + ); + value = decodeURIComponent( + StringPrototypeTrim( + StringPrototypeSubstring(keyPairPart, separatorIndex + 1), + ), + ); + } catch { + return; + } let metadata; if (valueProps.length > 0) { metadata = baggageEntryMetadataFromString(