Issues

• README uses non-existent server.InitDefault()

  documentationgood first issueseverity:low
  Garados007/MaxLib.WebServer#55 · Filter by author Garados007 opened on Oct 4, 2026

• OPTIONS responses ignore the actual routes

  bugenhancementseverity:low
  Garados007/MaxLib.WebServer#54 · Filter by author Garados007 opened on Oct 4, 2026

• WebSocket Closed fires up to 10 s after the connection is closed

  bugseverity:low
  Garados007/MaxLib.WebServer#53 · Filter by author Garados007 opened on Oct 4, 2026

• WebSocketConnection does not answer a client close frame

  bugsecurityseverity:medium
  Garados007/MaxLib.WebServer#52 · Filter by author Garados007 opened on Oct 4, 2026

• EventFactory rejects $type when unmapped members are disallowed

  bugseverity:low
  Garados007/MaxLib.WebServer#47 · Filter by author Garados007 opened on Oct 3, 2026

• WebSocket Close reason can be cut inside a UTF-8 character

  bugseverity:low
  Garados007/MaxLib.WebServer#46 · Filter by author Garados007 opened on Oct 3, 2026

• WebServiceGroup.Clear leaves services subscribed to the group

  buggood first issueseverity:low
  Garados007/MaxLib.WebServer#45 · Filter by author Garados007 opened on Oct 3, 2026
  1

• Session cookie Max-Age overflows for MaxAge over ~68 years

  buggood first issueseverity:low
  Garados007/MaxLib.WebServer#44 · Filter by author Garados007 opened on Oct 3, 2026

• SecureWebServer.Stop does not join its accept threads

  bugseverity:low
  Garados007/MaxLib.WebServer#43 · Filter by author Garados007 opened on Oct 3, 2026

• Urlencoded percent-decoding ignores the declared charset

  bugseverity:low
  Garados007/MaxLib.WebServer#42 · Filter by author Garados007 opened on Oct 3, 2026

• Urlencoded overflow still buffers one huge value in memory

  bugsecurityseverity:medium
  Garados007/MaxLib.WebServer#41 · Filter by author Garados007 opened on Oct 3, 2026

• Urlencoded overflow spool bypasses StorageMapper

  buggood first issuesecurityseverity:low
  Garados007/MaxLib.WebServer#40 · Filter by author Garados007 opened on Oct 3, 2026

• Multipart body with Content-Length 0 causes a 500

  bugseverity:low
  Garados007/MaxLib.WebServer#39 · Filter by author Garados007 opened on Oct 3, 2026

• Multipart boundary over ~508 chars causes a 500

  bugseverity:low
  Garados007/MaxLib.WebServer#38 · Filter by author Garados007 opened on Oct 3, 2026

• Multipart parsing matches boundary and form-data case-sensitively

  buggood first issueseverity:low
  Garados007/MaxLib.WebServer#37 · Filter by author Garados007 opened on Oct 3, 2026

• Suffix byte range bytes=-N is rejected with 416

  bugseverity:medium
  Garados007/MaxLib.WebServer#35 · Filter by author Garados007 opened on Oct 3, 2026

• Monitor.Save I/O failure leaks the connection

  bugseverity:medium
  Garados007/MaxLib.WebServer#34 · Filter by author Garados007 opened on Oct 3, 2026

• SpanStream seeks wrongly from the end and at end position

  buggood first issueseverity:low
  Garados007/MaxLib.WebServer#33 · Filter by author Garados007 opened on Oct 3, 2026

• HttpPost.Dispose skips Content disposal when data step throws

  bugseverity:low
  Garados007/MaxLib.WebServer#32 · Filter by author Garados007 opened on Oct 3, 2026

• TransformToStream stream has no real async read

  bugseverity:low
  Garados007/MaxLib.WebServer#31 · Filter by author Garados007 opened on Oct 3, 2026

• Cookie header is split on &, allowing cookie forgery

  buggood first issuesecurityseverity:medium
  Garados007/MaxLib.WebServer#30 · Filter by author Garados007 opened on Oct 3, 2026

• Cookie path can inject extra Set-Cookie attributes via ;

  buggood first issuesecurityseverity:low
  Garados007/MaxLib.WebServer#29 · Filter by author Garados007 opened on Oct 3, 2026

• Support chunked request bodies (Transfer-Encoding: chunked)

  enhancementseverity:medium
  Garados007/MaxLib.WebServer#28 · Filter by author Garados007 opened on Oct 3, 2026

• Keep-alive timeout check breaks when Environment.TickCount wraps

  buggood first issueseverity:low
  Garados007/MaxLib.WebServer#27 · Filter by author Garados007 opened on Oct 3, 2026

• Response framing uses Environment.NewLine instead of CRLF

  bugseverity:medium
  Garados007/MaxLib.WebServer#26 · Filter by author Garados007 opened on Oct 3, 2026