https://bugzilla.wikimedia.org/show_bug.cgi?id=35315

--- Comment #11 from Tim Starling <[email protected]> 2012-04-23 02:20:09 
UTC ---
(In reply to comment #8)
> Created attachment 10295 [details]
> Limit the number of iterations of the unstrip loop to the total number of 
> items
> to unstrip

This still left quite a bit of scope for algorithmic DoS. The iterative
algorithm that you're hacking was an inefficient hack to start with, since it
scans the entire expanded text at every recursion depth, giving a running time
proportional to the depth multiplied by the size. I had a go at doing a proper
job of it at https://gerrit.wikimedia.org/r/#change,5596

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to