Skip to content

Support max Read/Write nesting depth limits (StreamReadConstraints/StreamWriteConstraints) for YAML #456

@cowtowncoder

Description

@cowtowncoder

(note: related to / part of #430)

Currently YAML backend does not enforce any of the constraints. As the first step, let's see if we could easily add support for constraining maximum nesting depth, as this is an easily DoS-able problem.

(note: it is possible that underlying SnakeYAML still has issues with deeper nesting but we'll see)

Metadata

Metadata

Assignees

No one assigned

    Labels

    yamlIssue related to YAML format backend

    Type

    No type

    Projects

    No projects

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions