Dylan M. TaylorandClaude Opus 5.5 b12ee928f3 Security: document model generation budgets for live art, clipping runs, placed documents, graph masks, path reading and native entries ...

CodeRabbit findings #58, #75, #82, #113, #159, #175, #187:

- Live evaluation (expansion, envelope mapping and everything inside) makes at most 4M
  objects (`MAX_GENERATED`); deep expansion counts what each live object makes, and envelope
  image pieces count before they are cut.
- Clipping runs copy at most 8M clip path elements together; past it runs are plain groups.
- Exports read at most 256 placed documents; the rest show their previews.
- Graph design and marker budgets count opacity-mask art (`Node::count_with_masks`).
- Native files read at most 32M anchors (4M on wasm) of paths; the web build allows 1 GiB of
  entries after the JSON.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 17:19:16 +07:00

..

atomic.rs

Fix #1695: the copy-over fallback of a save keeps the old file until the new one is in

2026-10-14 09:00:42 +07:00

legacy.rs

M4.35: native files compress, save atomically, drop unused images, keep newer keys and save down to v1

2026-10-05 12:27:02 +07:00

lib.rs

Security: document model generation budgets for live art, clipping runs, placed documents, graph masks, path reading and native entries

2026-10-24 17:19:16 +07:00

stream.rs

Importers: PDF nesting inside compressed streams no longer crashes (hayro 0.8)

2026-10-14 10:13:45 +07:00

unpack.rs

Share native-format entries naming the same bytes; cap copies at data

2026-10-24 01:44:00 +07:00