Dylan M. TaylorandClaude Sonnet 5.5 f05c33cdfc Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888) ...

* Audit: document model bounds (id hashing, ranges, overprint migration, auto slices)

* Audit: nested Repeat bounds are measured once per level

* fix(slices): bound auto_slices accumulation strictly by MAX_AUTO_SLICES

* chore(text): use is_some_and instead of unnecessary map_or (clippy)

* Refuse automatic slice layout past a cut-rectangle bound

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-25 12:32:45 -04:00

..

selection

deselect hidden and locked objects in linear time

2026-10-12 14:50:00 +07:00

appearance.rs

Security: Affinity import and brush expansion bounds (#3887)

2026-10-23 22:43:42 -04:00

assets.rs

#1172: edit a large selection in time linear in the document, not quadratic

2026-10-11 23:26:53 +07:00

blend.rs

Gradients: a Perceptual gradient mixes its colours in OKLab, and SVG and PDF write it as an image

2026-10-23 01:53:29 +07:00

cancel.rs

Export for Screens: files are encoded and written on the background thread

2026-10-23 09:22:20 +07:00

clipnest.rs

Security: document model generation budgets for live art, clipping runs, placed documents, graph masks, path reading and native entries

2026-10-24 17:19:16 +07:00

cmyk.rs

TIFF: CCITT Group 3 compressed files open and place

2026-10-18 01:21:30 +07:00

corners.rs

Format: rustfmt after the batch

2026-10-21 23:38:03 +07:00

depth.rs

Security: render and PDF export bounds for symbol expansion, dotted guides, blending groups and pinned images

2026-10-24 17:19:59 +07:00

dimension.rs

Dimensions: a file whose dimensions carry options this version doesn't know still opens; commands still refuse unknown options

2026-10-16 01:36:24 +07:00

graph.rs

Security: document model generation budgets for live art, clipping runs, placed documents, graph masks, path reading and native entries

2026-10-24 17:19:16 +07:00

hit.rs

Type: emoji go with type that effects reshape and Expand Appearance

2026-10-24 04:49:06 +07:00

id_index.rs

Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888)

2026-10-25 12:32:45 -04:00

inks.rs

M4.75: File → Print writes the job as a print-ready PDF: paper, scale, tiles, marks and bleed, separations

2026-10-05 15:13:10 +07:00

inline.rs

M7: inline symbols in text

2026-10-08 15:45:34 -07:00

intertwine.rs

G13: Object › Intertwine: Make, Release and arranging overlap areas (#1763)

2026-10-16 04:44:52 +07:00

lib.rs

Reject exponent notation in the pica form of Unit::parse

2026-10-25 10:56:54 +00:00

links.rs

Security: bring Read into scope for the bounded link hash

2026-10-24 17:19:59 +07:00

live_paint.rs

Live Paint: Gap Options find and close gaps in Live Paint groups

2026-10-17 15:14:43 +07:00

live.rs

Security: document model generation budgets for live art, clipping runs, placed documents, graph masks, path reading and native entries

2026-10-24 17:19:16 +07:00

marks.rs

M4.72: PDF export draws printer's marks in Registration around each page

2026-10-05 13:05:20 +07:00

mem.rs

Objects on Path: attach objects to a path and spread them along it

2026-10-19 21:51:32 +07:00

metadata.rs

Reject a leading plus sign in SOURCE_DATE_EPOCH

2026-10-24 19:21:31 +07:00

node.rs

Security: document model generation budgets for live art, clipping runs, placed documents, graph masks, path reading and native entries

2026-10-24 17:19:16 +07:00

objects_on_path.rs

Objects on Path: clipping paths and parts of blends, envelopes and repeats stay in place

2026-10-21 16:46:13 +07:00

orient.rs

TRACE.B1: Exclude retained trace bitmaps from result bounds and highlights

2026-10-21 15:42:36 +07:00

overprint.rs

Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888)

2026-10-25 12:32:45 -04:00

pattern.rs

Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888)

2026-10-25 12:32:45 -04:00

perspective.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

pixels.rs

Gradient mesh: Object > Create Gradient Mesh on an embedded image (#1676)

2026-10-17 16:38:41 +07:00

placed_document.rs

Security bounds: fix on landing #3939 (see the PR comment)

2026-10-24 17:19:54 +07:00

plugin_data.rs

Plug-ins: filters keep data with the document (G17)

2026-10-23 05:40:00 +07:00

profiles.rs

M4.35: native files compress, save atomically, drop unused images, keep newer keys and save down to v1

2026-10-05 12:27:02 +07:00

puppet.rs

M8.6: Puppet Warp pins appear at once, warp from the rest shape and follow Undo

2026-10-06 11:16:10 +07:00

range.rs

Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888)

2026-10-25 12:32:45 -04:00

rastersettings.rs

M4.56: Document Raster Effects Settings with colour model, background, anti-alias, clipping mask and room around

2026-10-05 09:55:48 +07:00

reach.rs

M3.63: visual bounds and clicks take in the whole stroke

2026-10-05 02:55:23 +07:00

recolor.rs

Type: emoji go with type that effects reshape and Expand Appearance

2026-10-24 04:49:06 +07:00

selection.rs

Artboards: the Artboards panel locks an artboard and the art on it

2026-10-21 23:38:02 +07:00

setup.rs

i18n: add Turkish (tr) localization

2026-10-22 07:21:51 +07:00

shaper.rs

M2.9: add editable Shaper groups and shape orientation steps

2026-10-08 22:52:23 +01:00

shared.rs

#1723 follow-up: pattern tiles are drawn again after a brush edit or new Color Settings

2026-10-14 12:27:04 +07:00

slices.rs

Security: document model bounds (id hashing, page ranges, overprint migration, auto slices, nested Repeat bounds) (#3888)

2026-10-25 12:32:45 -04:00

style_libs.rs

Gradients: built with Gradient::new, so a new option touches one place

2026-10-22 22:38:41 +07:00

swatches.rs

Brushes: Select All Unused selects the brushes the document does not use

2026-10-21 15:42:36 +07:00

symbol_export_type.rs

G5: Symbol Options Export Type (Graphic / Movie Clip)

2026-10-16 15:27:52 +07:00

symbol_nine_slice.rs

Symbols: Symbol Options › Enable Guides for 9-Slice Scaling (#2342)

2026-10-17 16:38:41 +07:00

symbol_registration.rs

G5: Symbol Options Registration 9-point grid

2026-10-16 04:45:03 +07:00

symbols.rs

Symbols: instances of imported symbols are measured by their art

2026-10-14 04:56:30 +07:00

tests_lookups.rs

Part of #1429: Edit and Object commands on many objects take time linear in the document

2026-10-12 23:42:43 +07:00

tests_slices.rs

#1244: smaller objects: Node 352 -> 152 bytes, NodeKind 200 -> 80, and a cheaper undo estimate

2026-10-12 11:02:32 +07:00

tests_units.rs

Accept an explicit leading plus sign in Unit::parse

2026-10-23 02:10:57 +07:00

text.rs

Direct Selection: an anchor of type on a path's path drags and the type reflows along it (part of #3980)

2026-10-24 22:06:20 +02:00

trace.rs

Type: emoji go with type that effects reshape and Expand Appearance

2026-10-24 04:49:06 +07:00

variables.rs

Variables: Lock Variables stops variables from being defined, deleted or renamed

2026-10-17 17:13:03 +07:00

xml_id.rs

Escape spaces before x<hex> and a separator in XML ids

2026-10-24 21:03:43 +07:00