5 Commits

Include renames

Author	SHA1	Message	Date
Yang JunandCursor	b405733cdb	refactor(strftime): rely on memoryLimit for width control ... Remove MAX_STRFTIME_PAD hard capping and rely on memoryLimit enforcement before padding allocation. Update strftime/date tests and security-model docs to match the new boundary and renderLimit caveats. Co-authored-by: Cursor <[email protected]>	2026-05-10 13:34:37 +08:00
Yang JunandCursor	503429e4cd	docs: reorganize security-model structure for clarity ... Restructure English and Chinese security-model docs into a consistent flow: security boundary, limits overview, per-limit details, and online service guidance. Co-authored-by: Cursor <[email protected]>	2026-05-09 22:28:00 +08:00
Yang JunandCursor	1e8ce453a5	docs: merge DoS details into security-model docs ... Move the detailed parseLimit/renderLimit/memoryLimit explanations and examples into the English and Chinese security-model pages so content from the removed dos pages is preserved. Co-authored-by: Cursor <[email protected]>	2026-05-09 22:06:06 +08:00
Yang JunandCursor	cd431aabd9	docs: consolidate DoS docs into security-model pages ... Merge DoS guidance into security-model docs in both English and Chinese, and remove the placeholder dos.md pages to avoid duplicate/redirect-only docs. Co-authored-by: Cursor <[email protected]>	2026-05-09 14:50:52 +08:00
Yang JunandCursor	56b14d8a2d	fix(date): harden strftime memory accounting and document security model ... Move strftime memory charging into the same formatting path used for padding, enforce pre-allocation checks, and add regression tests for non-string date format PoCs. Add dedicated docs clarifying that memoryLimit is cooperative DoS mitigation and not strict heap isolation. Co-authored-by: Cursor <[email protected]>	2026-05-09 01:37:27 +08:00