v2.0.21 07 Mar 2024
[Security]
-
[jwe] Added
jwe.Settings(jwe.WithMaxDecompressBufferSize(int64))
to specify the
maximum size of a decompressed JWE payload. The default value is 10MB. If you
are compressing payloads greater than this and want to decompress it during
a call tojwe.Decrypt
, you need to explicitly set a value large enough to
hold that data.The same option can be passed to
jwe.Decrypt
to control this behavior on
a per-message basis. -
[jwe] Added documentation stating that
jwe.WithMaxBufferSize
option will be
renamed in future versions, i.e. v3