mirror of
https://github.com/prowler-cloud/prowler.git
synced 2026-10-07 04:04:09 +00:00
Legitimate PEM/PKCS#12 bundles are well under 10 KiB. A multi-MB payload would waste memory on base64 decoding plus PKCS#12/PEM parsing before the validator rejects it, so the size check runs before any parsing. Prevents memory-exhaustion attacks from callers that hand untrusted bytes to `validate_certificate_bundle`.