Jean 5d67133295 Strip CR/LF/NUL from every outbound s2s line ... Free-form trailing text (message bodies, kick reasons, topics, metadata) now passes through a single sanitizing choke-point in the serializer, so no such text can carry an embedded line break that would smuggle a second command onto the link. Line-based input closes the obvious path today, but sanitizing at the point of serialization removes the whole class regardless of where the text originated (federation, config, future non-line sources).		2026-07-13 23:34:51 +00:00
..
lib.rs	Strip CR/LF/NUL from every outbound s2s line	2026-07-13 23:34:51 +00:00