Under the hoodTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PluginsArea: what it touches
Internal ChangesKind: in v2.1.238,
Internal ChangesSection of the release
What
Keys written to the plugin asset cache are now validated and rejected with a dedicated error unless they are exactly 64 lowercase hexadecimal characters.
Evidence
must be a SHA-256 digest: 64 lowercase hexadecimal characters
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
