Yang JunandCursor 4ef0aa3fe7 fix(filters): charge join/array_to_sentence_string by output size ...

join charged memoryLimit by array element count, not by the string it
produces, letting concat doubling (cheap reference copies) inflate an
array's element count and then materialize a huge string via join far
past the configured memoryLimit (GHSA-4r6h-5v86-94p3). Charge by the
sum of stringified element lengths plus separators before allocating.
Apply the same fix to the sibling array_to_sentence_string filter.

Co-authored-by: Cursor <[email protected]>

2026-07-06 20:24:08 +08:00

..

cache.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

delimiter.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

dos.spec.ts

fix(filters): charge join/array_to_sentence_string by output size

2026-07-06 20:24:08 +08:00

fs-option.spec.ts

feat: locale support for date filter, #567 (#723)

2024-07-22 00:39:44 +08:00

keepoutput-opt.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

liquid.spec.ts

docs: remove translations & update homepage (#904)

2026-06-07 01:37:51 +08:00

operators-option.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

output-escape.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

register-filters.spec.ts

fix(security): block Object.prototype filter/tag lookups (RCE) (#897)

2026-05-14 22:18:10 +08:00

register-tags.spec.ts

fix(security): block Object.prototype filter/tag lookups (RCE) (#897)

2026-05-14 22:18:10 +08:00

root.spec.ts

test: case for "." path handling

2024-11-12 23:59:40 +08:00

strict.spec.ts

fix: Allow lenientIf for multiple operands (issue #682) (#683)

2024-04-21 16:04:38 +08:00

trimming.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00

whitespace-ctrl.spec.ts

chore: migrate test cases from Chai to Jest

2023-03-20 00:41:06 +08:00