From 55617685863d56c47f70cfac730172c3c2ea792d Mon Sep 17 00:00:00 2001 From: Yang Jun Date: Tue, 5 May 2026 00:01:45 +0800 Subject: [PATCH] fix: enforce renderLimit for empty renderTemplates calls renderLimit was only checked inside the per-template loop, so renderTemplates([], ...) skipped it entirely. Empty {% for %} / {% tablerow %} bodies invoke that path once per iteration, bypassing the documented time budget. Check the limiter at renderTemplates entry before the loop. Add regression test for empty for-body with a strict renderLimit. Co-authored-by: Cursor --- src/render/render.ts | 1 + test/integration/liquid/dos.spec.ts | 5 +++++ 2 files changed, 6 insertions(+) diff --git a/src/render/render.ts b/src/render/render.ts index 6cfc9a99a..8d0b7d806 100644 --- a/src/render/render.ts +++ b/src/render/render.ts @@ -15,6 +15,7 @@ export class Render { if (!emitter) { emitter = ctx.opts.keepOutputType ? new KeepingTypeEmitter() : new SimpleEmitter() } + ctx.renderLimit.check(getPerformance().now()) const errors = [] for (const tpl of templates) { ctx.renderLimit.check(getPerformance().now()) diff --git a/test/integration/liquid/dos.spec.ts b/test/integration/liquid/dos.spec.ts index 875d299a1..50d87ecfd 100644 --- a/test/integration/liquid/dos.spec.ts +++ b/test/integration/liquid/dos.spec.ts @@ -48,6 +48,11 @@ describe('DoS related', function () { await expect(liquid.parseAndRender('{% render "large" %}')).rejects.toThrow('template render limit exceeded') await expect(liquid.parseAndRender('{% render "small" %}')).resolves.toBe('12345') }) + it('should enforce renderLimit when for body has no template nodes', () => { + const liquid = new Liquid({ memoryLimit: 1e9, renderLimit: 1 }) + expect(() => liquid.parseAndRenderSync('{%- for i in (1..5000000) -%}{%- endfor -%}', {})) + .toThrow('template render limit exceeded') + }) }) describe('#memoryLimit', () => { it('should throw for too many array creation in filters', async () => {