diff options
author | milde <milde@929543f6-e4f2-0310-98a6-ba3bd3dd1d04> | 2020-09-14 10:26:03 +0000 |
---|---|---|
committer | milde <milde@929543f6-e4f2-0310-98a6-ba3bd3dd1d04> | 2020-09-14 10:26:03 +0000 |
commit | 8cc06070f55ed0f53af108c5c972a1a325510c05 (patch) | |
tree | d1e827c41d28072b5bfc188486350a5d43b50de8 /sandbox/code-block-directive | |
parent | ecadb51c483fabcbc57e2d513a540fc039d64962 (diff) | |
download | docutils-8cc06070f55ed0f53af108c5c972a1a325510c05.tar.gz |
Limit length of input lines and substitution expansion.
Mitigate the danger of DoS attacs using
specially crafted rST input (cf. bug #381).
The default value of 10 000 characters should suffice for
legitimate use cases (e.g. long paragraphs in auto-wrapping editors
or extensive creative use of substitutions).
Applications processing untrusted rST might wish to lower this
limitation (together with other safety measures described in
docs/howto/security.txt).
Unsupervised processing of untrusted rST input should always
be safeguarded with limits on processing time and memory use.
git-svn-id: https://svn.code.sf.net/p/docutils/code/trunk@8565 929543f6-e4f2-0310-98a6-ba3bd3dd1d04
Diffstat (limited to 'sandbox/code-block-directive')
0 files changed, 0 insertions, 0 deletions