Yang JunandCursor 56b14d8a2d fix(date): harden strftime memory accounting and document security model ...

Move strftime memory charging into the same formatting path used for padding, enforce pre-allocation checks, and add regression tests for non-string date format PoCs. Add dedicated docs clarifying that memoryLimit is cooperative DoS mitigation and not strict heap isolation.

Co-authored-by: Cursor <[email protected]>

2026-05-09 01:37:27 +08:00

..

drop

fix: isComparable full interface check (#701)

2024-05-24 10:35:49 +08:00

filters

fix(date): harden strftime memory accounting and document security model

2026-05-09 01:37:27 +08:00

liquid

fix: enforce renderLimit for empty renderTemplates calls (#894)

2026-05-07 23:03:43 +08:00

misc

fix: consistent range syntax parsing, #791

2025-01-19 17:58:00 +08:00

static_analysis

feat: static variable analysis (#770)

2024-12-28 21:35:28 +08:00

tags

fix: propagate ownPropertyOnly into Context.spawn() for {% render %} (#893)

2026-05-03 22:35:31 +08:00