mirror of
https://github.com/storytold/deckcraft.git
synced 2026-10-31 05:56:55 -06:00
Nikita RakitinandCursor
d2066a1f07
- Charts: every category/value/size cache draws from one chart-wide budget of 1M decoded slots, so sparse ptCount/idx declarations across many series can't expand far beyond the XML. - Chart parts go through the same 96 MiB XML size guard as other XML. - Package::open charges every inflated byte, including parts it then discards, against a 4 GiB decompression budget and stops reading entries once it is spent. - Legacy OLE previews index each VML drawing once (shape id -> picture part) instead of reparsing it and its rels for every object. Co-authored-by: Cursor <cursoragent@cursor.com>