Skip to content

Limit <svg><foreign-content> nesting depth#318

Open
kornelski wants to merge 1 commit into
mainfrom
ns-stack
Open

Limit <svg><foreign-content> nesting depth#318
kornelski wants to merge 1 commit into
mainfrom
ns-stack

Conversation

@kornelski
Copy link
Copy Markdown
Contributor

That stack (in a Vec) was technically unbounded, although not dangerous in practice due to tiny size of the enums.

This change puts a size limit on it, which rejects very suspicious documents that have <svg>s nested inside another <svg> with HTML foreign content sandwiched in between 256+ times.

@kornelski kornelski requested review from a team, Noah-Kennedy, jasnell and orium as code owners May 5, 2026 17:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant