Skip to content

fix: remove unused createDispatchFn with no method allowlist#22219

Merged
spalladino merged 1 commit into
merge-train/spartanfrom
phil/a-745-audit-73-arbitrary-method-dispatch-via-transport-no-method
Apr 1, 2026
Merged

fix: remove unused createDispatchFn with no method allowlist#22219
spalladino merged 1 commit into
merge-train/spartanfrom
phil/a-745-audit-73-arbitrary-method-dispatch-via-transport-no-method

Conversation

@PhilWindle

Copy link
Copy Markdown
Collaborator

Summary

  • Removes dead createDispatchFn which allowed arbitrary method dispatch without a method allowlist
  • The function had zero callsites — the only TransportServer usage already validates via schemaHasMethod
  • Moves the DispatchMsg type into create_dispatch_proxy.ts where it's actually used

Fixes A-745

🤖 Generated with Claude Code

The createDispatchFn function had zero callsites and allowed arbitrary
method dispatch without validation. The only actual TransportServer
usage already validates methods via schemaHasMethod. Remove the dead
code and move the DispatchMsg type into create_dispatch_proxy.ts.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@PhilWindle PhilWindle marked this pull request as ready for review April 1, 2026 11:57
@spalladino spalladino enabled auto-merge (squash) April 1, 2026 12:03
@spalladino spalladino merged commit e3080e1 into merge-train/spartan Apr 1, 2026
18 checks passed
@spalladino spalladino deleted the phil/a-745-audit-73-arbitrary-method-dispatch-via-transport-no-method branch April 1, 2026 12:16
github-merge-queue Bot pushed a commit that referenced this pull request Apr 1, 2026
BEGIN_COMMIT_OVERRIDE
chore: (A-771) remove dead code, verify keypair (#22167)
fix(aes128): validate PKCS#7 padding in decryptBufferCBC (#22179)
chore: (A-815) fix l1 tx utils fallback id logic (#22187)
fix(archiver): always advance L1-to-L2 messages syncpoint to current L1
block (#22154)
chore: (A-832) fix defaultFetch double consuming response on JSON parse
failure (#22194)
fix: indefinite retry for prover node and agent broker communication
(#22202)
fix: remove unused createDispatchFn with no method allowlist (#22219)
chore: fix wallet setup to use NO_FROM instead of ZERO address (#22222)
fix: update aes128 bad-key test for PKCS#7 padding validation (#22190)
END_COMMIT_OVERRIDE
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants