3 people 8a0c74a7fc fix(security): charge pop filter allocation to memoryLimit (#907) ...

* fix(security): charge pop filter allocation to memoryLimit (CWE-770)

The `pop` array filter cloned the input via `[...toArray(v)]` without
charging `this.context.memoryLimit.use(...)`, bypassing the memoryLimit
DoS guard that its sibling filters (shift, unshift, compact, etc.) apply.
Mirror `shift` to account for the O(N) allocation.

Co-authored-by: Cursor <[email protected]>

* fix(security): charge sample filter full clone allocation to memoryLimit (CWE-770)

Co-authored-by: Cursor <[email protected]>

---------

Co-authored-by: Cursor <[email protected]>

2026-06-14 15:50:50 +08:00

..

demo

test: refactor test:demo script into demo/*/test.sh

2024-08-29 01:30:25 +08:00

e2e

fix: nested block for layout (#883)

2026-04-19 23:41:35 +08:00

integration

fix(security): charge pop filter allocation to memoryLimit (#907)

2026-06-14 15:50:50 +08:00

stub

fix: use realpath for fs.contains (#867)

2026-04-06 14:40:35 +08:00

.eslintrc.json

chore: split Github Actions workflows

2023-06-05 23:32:35 +08:00

tsconfig.json

fix: path traversal vulnerability, #851 (#855)

2026-03-08 02:36:09 +08:00