Labyricorn/liquidjs
1
0
Fork 0
mirror of https://github.com/harttle/liquidjs.git synced 2026-09-16 12:50:38 -07:00
Code Issues Packages Projects Releases Wiki Activity

docs(zh-cn): add security model docs for DoS limits

Browse Source 
Add a Chinese security-model tutorial and link it from the Chinese DoS guide to clarify that memoryLimit is cooperative accounting, list uncounted custom conversion cases, and recommend avoiding fully user-defined templates in online services.

Co-authored-by: Cursor <[email protected]>
This commit is contained in:
Yang Jun
2026-05-09 14:43:43 +08:00
co-authored by Cursor
parent 56b14d8a2d
commit 5798754f80
2 changed files with 34 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/source/zh-cn/tutorials/dos.md
+4 -1
View File
@@ -8,6 +8,8 @@ title: 防止 DoS 攻击
设置这些选项可以在很大程度上确保你的 LiquidJS 实例不会长时间挂起或消耗过多内存。这些限制基于可用的 JavaScript API，因此它们不是精确的硬性限制，而是确保你的进程不会失败或挂起的阈值。
关于安全边界和生产环境加固建议，请参见 [安全模型][security-model]。
```typescript
const liquid = new Liquid({
parseLimit: 1e8, // 每次渲染的模板的典型大小
@@ -52,4 +54,5 @@ const liquid = new Liquid({
[paralleljs]: https://www.npmjs.com/package/paralleljs
[parseLimit]: /api/interfaces/LiquidOptions.html#parseLimit
[renderLimit]: /api/interfaces/LiquidOptions.html#renderLimit
[memoryLimit]: /api/interfaces/LiquidOptions.html#memoryLimit
[memoryLimit]: /api/interfaces/LiquidOptions.html#memoryLimit
[security-model]: /zh-cn/tutorials/security-model.html