cbxcvl 6e71050593 fix(renderer): remove ambiguous \s* from _parse_if regex to prevent ReDoS ...

The pattern \s*(.+?)\s* in _parse_if allowed polynomial backtracking
when no closing }} was found — confirmed to hang at n=5000 whitespace
chars. The \s* wrappers were redundant since group(1) is already
stripped at the call site.

Reported and patched with @pa1va. Closes #2326

2026-03-27 13:53:54 -03:00

..

bash

fix: only convert config symlinks when modification is needed. fix #2299

2026-03-25 17:18:54 -04:00

dev

feat(settings): improved search index to support visibility conditions, prevent showing results that would be invisible to the user. Fix #2113

2026-03-11 10:07:44 -04:00

python/src

fix(renderer): remove ambiguous \s* from _parse_if regex to prevent ReDoS

2026-03-27 13:53:54 -03:00