Version 0.90.12

Three values a request can send are now bounded before they are used.

The human-check token was checked only for being non-empty and then forwarded to Cloudflare, so one request with no account behind it could make our server upload several megabytes on its behalf; it is now refused above 8 KB. The rebuttal text sent with a report skipped the control-character check every other piece of writing goes through, and the screen an operator reads reports on is a terminal where some characters overwrite the line above. A file part’s stored end-of-term number had no range: set absurdly high, every later extension of that file failed with a server error a retry could not clear. None of the three changes anything you can send in normal use.