Fix

Author: timokoessler

library/agent/api-discovery/getStringFormat.ts

@@ -25,8 +25,8 @@ const indicationChars = new Set<string>(["-", ":", "@", ".", "://"]);
  * https://swagger.io/docs/specification/v3_0/data-models/data-types/#strings
  */
 export function getStringFormat(str: string): StringFormat | undefined {
-  // Skip if too short or very long
-  if (str.length < 5 || str.length > 1_000) {
+  // Skip if too short
+  if (str.length < 5) {
     return undefined;
   }
 

library/vulnerabilities/attack-wave-detection/checkQuery.ts

@@ -30,7 +30,7 @@ export function checkQuery(context: Context): boolean {
   }
   for (const str of queryStrings) {
     // Performance optimization
-    if (str.length < 5) {
+    if (str.length < 5 || str.length > 1_000) {
       continue;
     }