aiongg a525cf1d42 fix(js): refuse code compiled from strings that skipped the script checks ...

eval and the Function constructors compiled code built at run time, which never
passed the size and nesting checks a script passes before it runs, so a short
form script could hand boa's recursive parser a deeply nested string and
overflow the stack. Form scripts now refuse to compile code from strings. XFA
scripts, which the runner itself starts through eval, hold such code to the
same checks as the script.

2026-10-22 13:18:26 -04:00

..

src

fix(js): refuse code compiled from strings that skipped the script checks

2026-10-22 13:18:26 -04:00

Cargo.toml

Use chrono instead of hand-rolled UTC conversion (#3824)

2026-10-21 19:36:46 -04:00