Yang JunandCursor 56b14d8a2d fix(date): harden strftime memory accounting and document security model ...

Move strftime memory charging into the same formatting path used for padding, enforce pre-allocation checks, and add regression tests for non-string date format PoCs. Add dedicated docs clarifying that memoryLimit is cooperative DoS mitigation and not strict heap isolation.

Co-authored-by: Cursor <[email protected]>

2026-05-09 01:37:27 +08:00

..

access-scope-in-filters.md

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

caching.md

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

contribution-guidelines.md

docs: update financial contributors

2025-04-03 21:27:48 +08:00

differences.md

docs: state differences regarding inspect array/hash, #852, #853 (#858)

2026-03-08 03:14:13 +08:00

dos.md

fix(date): harden strftime memory accounting and document security model

2026-05-09 01:37:27 +08:00

drops.md

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

escaping.md

feat: group_by/group_by_exp/find/find_exp from Jekyll, #443

2024-04-14 19:34:07 +08:00

intro-to-liquid.md

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

migrate-to-9.md

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

operators.md

docs: update docs for operators (#847)

2026-01-10 22:09:10 +08:00

options.md

docs: Fix typo in options.md (#802)

2025-05-09 21:16:08 +08:00

parse-parameters.md

docs: fix styles and escape

2024-08-20 03:35:37 +08:00

partials-and-layouts.md

docs: typo fix an -> can

2021-10-15 22:55:22 +08:00

plugins.md

docs: update broken link

2024-05-14 18:20:54 +08:00

register-filters-tags.md

Update register-filters-tags.md

2025-04-02 21:01:20 +08:00

render-file.md

fix: use realpath for fs.contains (#867)

2026-04-06 14:40:35 +08:00

render-tag-content.md

docs: fix styles and escape

2024-08-20 03:35:37 +08:00

security-model.md

fix(date): harden strftime memory accounting and document security model

2026-05-09 01:37:27 +08:00

setup.md

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

static-analysis.md

docs: zh-cn translation for static analyze features

2024-12-28 21:49:29 +08:00

sync-and-async.md

chore: upgrade API doc to latest typedoc, fixes #593

2023-03-20 00:41:06 +08:00

truthy-and-falsy.md

docs: format

2020-10-08 14:40:58 +08:00

use-in-expressjs.md

docs: fix some spelling (#708)

2024-06-17 17:19:46 +08:00

whitespace-control.md

Replace trimValue with trimOutput (#757)

2024-09-28 00:49:37 +08:00