From 847878b26581e2a0831eacc3f1a3a9e96cfbcb2b Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:23:30 +0600 Subject: [PATCH 01/20] relax security limits and budget constraints --- src/core/verifier.ts | 6 +++--- src/dsl/security.ts | 7 +++---- 2 files changed, 6 insertions(+), 7 deletions(-) diff --git a/src/core/verifier.ts b/src/core/verifier.ts index 54d3126..713246e 100644 --- a/src/core/verifier.ts +++ b/src/core/verifier.ts @@ -59,9 +59,9 @@ export const DEFAULT_BUDGETS: Record = { maxStackDepth: 100, }, [ComplexityClass.FACTORIAL]: { - maxIterations: Number.MAX_SAFE_INTEGER, - maxTime: 120000, - maxStackDepth: 1000, + maxIterations: Infinity, + maxTime: 300000, + maxStackDepth: 5000, }, }; diff --git a/src/dsl/security.ts b/src/dsl/security.ts index 10381fb..1a65053 100644 --- a/src/dsl/security.ts +++ b/src/dsl/security.ts @@ -22,7 +22,7 @@ export function validatePropertyPath(path: string[]): void { } // Block dangerous property names - const dangerousNames = ['__proto__', 'constructor', 'prototype', 'valueOf', 'toString']; + const dangerousNames = ['__proto__', 'constructor', 'prototype']; if (dangerousNames.includes(segment)) { throw new Error( @@ -42,9 +42,8 @@ export function validateRegexPattern(pattern: string): void { new RegExp(pattern); // Block patterns that could cause ReDoS or other issues - // This is a basic check - production systems would want more sophisticated validation - if (pattern.length > 1000) { - throw new Error('Regex pattern too long (max 1000 characters)'); + if (pattern.length > 5000) { + throw new Error('Regex pattern too long (max 5000 characters)'); } // NOTE: This is a basic ReDoS check. For production use, consider using From 17b31e627abd1e0714433dfd6578563cdeca8191 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:25:03 +0600 Subject: [PATCH 02/20] trigger re-review From cdfbff39f3a586947d9d1d56e7804b059e13fb2d Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:25:44 +0600 Subject: [PATCH 03/20] trigger re-review 2 From 65eb94e50c382764fea0cb2fae8f247e58b30b5d Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:27:34 +0600 Subject: [PATCH 04/20] trigger re-review 3 From 28e4e703794ba701845f1b311c8ea290568efede Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:29:20 +0600 Subject: [PATCH 05/20] trigger re-review 4 From 1020cd9b55a6d65c353497fcc3150c3581c9ea85 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:36:34 +0600 Subject: [PATCH 06/20] trigger re-review 5 From ba8b8e9647547795c544455180af98e4b1c53fe7 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:38:39 +0600 Subject: [PATCH 07/20] trigger re-review 6 From f4d985db86ad7b4f42ee4185268d5405aeac5498 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:39:15 +0600 Subject: [PATCH 08/20] trigger re-review 7 From aba78a1a6b52bccb7b14d3e68eb0cd6d5ba7a6da Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 05:41:01 +0600 Subject: [PATCH 09/20] trigger review From 52ec445f4be06db28ed1fff14509194a146e488d Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:00:04 +0600 Subject: [PATCH 10/20] trigger review From 28c0d5e8a45ec1ac026c6426274861e1f799f3b7 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:02:53 +0600 Subject: [PATCH 11/20] trigger review From 404e7a320db6cd41a1062462b42d17798c560bf6 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:06:24 +0600 Subject: [PATCH 12/20] trigger review From d075b3b85930253d2307dc7157499304baf74bad Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:09:12 +0600 Subject: [PATCH 13/20] trigger review From 8f9e8fe8e74c247b0c7e02b0d6c7d4e250d17e10 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:15:37 +0600 Subject: [PATCH 14/20] trigger review From 62de5ce643d86aa57db0d3b0427351039dfe45c2 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:15:53 +0600 Subject: [PATCH 15/20] trigger review From 624035dfd363e68eaa4b25e702aee4af825cf202 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:16:32 +0600 Subject: [PATCH 16/20] trigger From 75618d3577566576e85636543f66896b9135ddb0 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:17:37 +0600 Subject: [PATCH 17/20] trigger From 659c60190b05f82e7123b192089107667ec13917 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:18:58 +0600 Subject: [PATCH 18/20] trigger review From f8db0722f998fc47ac2c8a048ad8ff17e27771f0 Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:20:41 +0600 Subject: [PATCH 19/20] trigger From 427c71befda13f36454b63556b3125c03257bc4a Mon Sep 17 00:00:00 2001 From: sertdev Date: Tue, 24 Feb 2026 06:23:07 +0600 Subject: [PATCH 20/20] trigger review