wstockandClaude Fable 5.1 02bc1e38aa Importers: XML element nesting and DTD group nesting are bounded (#712) ...

The DOCX and IDML element-tree builders accepted any depth, and the
tree is then walked and dropped recursively; a DTD content model's
groups recursed without a budget. Each parser now refuses nesting past
a fixed budget with an error, before any recursive consumer runs.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011K1peyrh5MdZ6ttHkVq8Gh

2026-10-15 07:13:51 +00:00

..

color

Skip .ase swatches with NaN or infinite colour components

2026-10-15 04:58:52 +02:00

compose

Merge PR #372

2026-10-15 00:35:27 -04:00

doc

Merge PR #474

2026-10-15 00:35:27 -04:00

engine

Importers: XML element nesting and DTD group nesting are bounded (#712)

2026-10-15 07:13:51 +00:00

epub

Merge PR #783

2026-10-14 22:56:50 -04:00

fonts

Merge PR #464

2026-10-15 00:35:27 -04:00

format

Bound decompressed size and entry count of native and IDML ZIP imports

2026-10-15 01:24:38 +02:00

geom

Merge PR #308

2026-10-15 00:35:27 -04:00

idml

Importers: XML element nesting and DTD group nesting are bounded (#712)

2026-10-15 07:13:51 +00:00

images

Merge PR #930

2026-10-14 22:05:12 -04:00

mcp

Merge PR #813

2026-10-14 22:05:11 -04:00

pdf

Merge PR #825 (gradient text paint goes through #657's stroke-behind-fill painting)

2026-10-14 23:31:39 -04:00

pptx

fix: integrate batched community PRs (#170's PPTX exporter on the page-indexed compose cache and crate::io, with a Georgian menu label; #171: a deleted style's replacement is never based on itself)

2026-10-15 00:35:27 -04:00

render

Merge PR #472

2026-10-15 00:35:27 -04:00

textimport

Importers: XML element nesting and DTD group nesting are bounded (#712)

2026-10-15 07:13:51 +00:00

tools

Merge PR #474

2026-10-15 00:35:27 -04:00

ui-egui

fix: integrate batched community PRs (#170's PPTX exporter on the page-indexed compose cache and crate::io, with a Georgian menu label; #171: a deleted style's replacement is never based on itself)

2026-10-15 00:35:27 -04:00