refactor(audit) : alias explicite + borne le user-agent stocké

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
2026-06-24 10:34:03 +02:00
parent 4513896112
commit 48ee173461
2 changed files with 5 additions and 0 deletions
@@ -46,6 +46,10 @@ readonly class AuditLogger
            if (null !== $deviceId) {
                $deviceId = mb_substr($deviceId, 0, 64);
            }
+            // The user agent comes from an untrusted client header; cap it to prevent storage bloat.
+            if (null !== $userAgent) {
+                $userAgent = mb_substr($userAgent, 0, 1024);
+            }
        }

        $auditLog = new AuditLog();