Files
liquidjs/test/integration/liquid
Yang JunandCursor 706cb02d30 fix(security): charge json/inspect indentation and keys to memoryLimit
The incremental per-node charge ignored two output contributors that can
greatly exceed the charged amount: the `space` indentation (which scales
with nesting depth) and object property keys. Both let `{{ data | json: 10 }}`
or key-heavy objects produce far larger strings than memoryLimit accounts
for. Charge a depth-scaled indentation cost and the key length per node,
keeping the total a strict lower bound of the output length.

Also trims the redundant narrating comments added with the original fix.

Co-authored-by: Cursor <[email protected]>
2026-06-14 16:25:31 +08:00
..
2024-11-12 23:59:40 +08:00