CSEC_PUBLIC/WELA
1
0 Fork 0
mirror of https://github.com/Yamato-Security/WELA.git synced 2026-10-25 14:38:17 +01:00
Code Issues Packages Projects Releases Wiki Activity

fix: normalize native WEF reader tokens before strict validation

Browse Source
This commit is contained in:
Shirofune-Security committed 2026-09-22 12:30:51 +09:00
1 parent 1dfb66fb40
commit 9692edcec6
4 files changed
+31 -5
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

scripts/WefQuery.ps1
+9 -1
View File
@@ -22,7 +22,15 @@ function Get-WelaWefQuerySources {
}
function Get-WelaWefQueryToken {
Initialize-WelaWefQueryNative
[Wela.WefQueryToken.Native]::Snapshot()
ConvertTo-WelaWefQueryTokenObservation ([Wela.WefQueryToken.Native]::Snapshot())
}
function ConvertTo-WelaWefQueryTokenObservation {
param($Token)
if($Token -isnot [Wela.WefQueryToken.Token]){throw 'Expected the native query token observation.'}
# Normalize native DTOs at the boundary, using the same strict shape as worker receipts.
$observed=ConvertFrom-WelaArrivalJson (Get-WelaWefQueryKey $Token)
$null=Get-WelaWefQueryTokenKey $observed
$observed
}
function Get-WelaWefQueryTokenKey {
param($Token)