Enforce size limit or timeout while parsing target configurations
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 210
- Forks
- 36
- Avg merge
- 1d 10h
- Merged PRs (30d)
- 2
Description
We are parsing various kinds of untrusted source files in JSON, YAML , and bash. The JSON standard library warns about parsing JSON files and suggests putting a limit on the size of input files.
This might not be a big issue because in the worst case Macaron might hang and consume unnecessary CPU and memory. When Macaron is integrated into CI/CD or any other automated service, we could consider adding some file size limits when parsing input files.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No files, tests, or parser entry points are named. Start by locating the JSON, YAML, and bash configuration parsers, then define the required size or timeout behavior and add coverage showing those limits are enforced; done means untrusted inputs cannot cause unbounded parsing work.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100