Yang JunandCursor 4ef0aa3fe7 fix(filters): charge join/array_to_sentence_string by output size ...

join charged memoryLimit by array element count, not by the string it
produces, letting concat doubling (cheap reference copies) inflate an
array's element count and then materialize a huge string via join far
past the configured memoryLimit (GHSA-4r6h-5v86-94p3). Charge by the
sum of stringified element lengths plus separators before allocating.
Apply the same fix to the sibling array_to_sentence_string filter.

Co-authored-by: Cursor <[email protected]>

2026-07-06 20:24:08 +08:00

..

context

fix: enforce ownPropertyOnly for inherited array indices (#924)

2026-07-06 20:12:09 +08:00

drop

fix: isComparable full interface check (#701)

2024-05-24 10:35:49 +08:00

filters

fix(filters): modulo should follow divisor sign for negative operands (#922)

2026-06-26 01:19:59 +08:00

liquid

fix(filters): charge join/array_to_sentence_string by output size

2026-07-06 20:24:08 +08:00

misc

fix: consistent range syntax parsing, #791

2025-01-19 17:58:00 +08:00

static_analysis

feat: static variable analysis (#770)

2024-12-28 21:35:28 +08:00

tags

fix: propagate ownPropertyOnly into Context.spawn() for {% render %} (#893)

2026-05-03 22:35:31 +08:00