Initial commit

This commit is contained in:
Richard
2026-07-31 10:08:13 +02:00
parent 652943fb7e
commit a69f31649c
7192 changed files with 924319 additions and 0 deletions
@@ -0,0 +1,26 @@
"use strict";
exports.__esModule = true;
exports.MAX_NESTING_DEPTH = void 0;
exports["default"] = resolveMaxNestingDepth;
/**
* The default maximum selector nesting depth allowed when parsing or
* serializing a selector. Going beyond this would otherwise recurse deeply
* enough to overflow the call stack (CVE-2026-9358 / CWE-674). Real-world
* selectors never get anywhere near this, so it acts purely as a safety net
* that turns an uncatchable stack overflow into a catchable error.
*/
var MAX_NESTING_DEPTH = exports.MAX_NESTING_DEPTH = 256;
/**
* Coerce a user-supplied nesting-depth limit into a safe value. Anything that
* is not a non-negative safe integer (NaN, Infinity, negative numbers, or a
* non-number) would disable or break the guard, so it falls back to the
* default.
*
* @param {unknown} value the limit provided through the `maxNestingDepth` option
* @returns {number} a safe, non-negative integer limit
*/
function resolveMaxNestingDepth(value) {
return Number.isSafeInteger(value) && value >= 0 ? value : MAX_NESTING_DEPTH;
}