Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Lower default maxNestingDepth of StreamReadConstraints / StreamWriteConstraints to 500 in 3.0 #1233

Closed
cowtowncoder opened this issue Mar 2, 2024 · 0 comments

Comments

@cowtowncoder
Copy link
Member

Currently (as of 2.17), maximum document nesting depth for both StreamReadConstraints and StreamWriteConstraints is 1,000. While this seems to work, causing no false positives (i.e. we haven't received complaints about too strict limit, it is possibly too high for some use case -- specifically for some Fuzzing systems manage to StackOverflowError before reaching limit that would avoid it.

It looks like default of 500 would solve this issue, without affecting legit use cases (probably anything above 100 would, but let's be conservative here).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant