| 12345678910111213141516171819202122232425 |
- "use strict";
- Object.defineProperty(exports, "__esModule", { value: true });
- exports.MAX_NESTING_DEPTH = void 0;
- exports.default = resolveMaxNestingDepth;
- /**
- * The default maximum selector nesting depth allowed when parsing or
- * serializing a selector. Going beyond this would otherwise recurse deeply
- * enough to overflow the call stack (CVE-2026-9358 / CWE-674). Real-world
- * selectors never get anywhere near this, so it acts purely as a safety net
- * that turns an uncatchable stack overflow into a catchable error.
- */
- exports.MAX_NESTING_DEPTH = 256;
- /**
- * Coerce a user-supplied nesting-depth limit into a safe value. Anything that
- * is not a non-negative safe integer (NaN, Infinity, negative numbers, or a
- * non-number) would disable or break the guard, so it falls back to the
- * default.
- *
- * @param {unknown} value the limit provided through the `maxNestingDepth` option
- * @returns {number} a safe, non-negative integer limit
- */
- function resolveMaxNestingDepth(value) {
- return Number.isSafeInteger(value) && value >= 0 ? value : exports.MAX_NESTING_DEPTH;
- }
- //# sourceMappingURL=maxNestingDepth.js.map
|
