Yang JunandCursor 8734b5fc6e fix(security): charge pop filter allocation to memoryLimit (CWE-770) ...

The `pop` array filter cloned the input via `[...toArray(v)]` without
charging `this.context.memoryLimit.use(...)`, bypassing the memoryLimit
DoS guard that its sibling filters (shift, unshift, compact, etc.) apply.
Mirror `shift` to account for the O(N) allocation.

Co-authored-by: Cursor <[email protected]>

2026-06-14 00:14:00 +08:00

..

drop

fix: isComparable full interface check (#701)

2024-05-24 10:35:49 +08:00

filters

fix(strip_html): rewrite as linear single-pass scan to avoid ReDoS (#896)

2026-05-11 23:59:40 +08:00

liquid

fix(security): charge pop filter allocation to memoryLimit (CWE-770)

2026-06-14 00:14:00 +08:00

misc

fix: consistent range syntax parsing, #791

2025-01-19 17:58:00 +08:00

static_analysis

feat: static variable analysis (#770)

2024-12-28 21:35:28 +08:00

tags

fix: propagate ownPropertyOnly into Context.spawn() for {% render %} (#893)

2026-05-03 22:35:31 +08:00