SomberNight 3e4601c61d base64.b64decode: always set validate=True ...

Notably verifymessage and decrypt(message) were silently ignoring trailing garbage
or inserted non-base64 characters present in signatures/ciphertext.
(both the CLI commands and in the GUI)
I think it is much cleaner and preferable to treat such signatures/ciphertext as invalid.

In fact I find it surprising that base64.b64decode(validate=False) is the default.
Perhaps we should create a helper function for it that set validate=True and use that.

2025-06-03 18:58:05 +00:00

36 KiB

Raw Blame History

View Raw