mirror of
https://github.com/microsoft/regorus.git
synced 2026-08-05 02:16:11 +00:00
898643129e
- Add PolicyLengthConfig struct with max_col, max_file_bytes, and max_lines fields, replacing hardcoded constants in the lexer. - Add Engine::set_policy_length_config and clear_policy_length_config to allow callers to override the default limits. - Add Source::from_contents_with_limits and from_file_with_limits for direct Source construction with custom limits; existing from_contents and from_file signatures are preserved using defaults. - Add tests for default rejection, custom limits, and engine plumbing. - Add bindings for C, C++, Python, WASM/JS, Java, Ruby, C#, Go
37 lines
1.5 KiB
Rust
37 lines
1.5 KiB
Rust
// Copyright (c) Microsoft Corporation.
|
|
// Licensed under the MIT License.
|
|
|
|
use core::num::{NonZeroU32, NonZeroUsize};
|
|
|
|
/// Policy source length limits enforced when loading policy files.
|
|
///
|
|
/// These limits reject pathological or generated inputs early, before parsing begins.
|
|
/// Use [`Default::default`] for the built-in thresholds.
|
|
#[derive(Clone, Copy, Debug, PartialEq, Eq)]
|
|
pub struct PolicyLengthConfig {
|
|
/// Maximum column width per line (default: 1024).
|
|
pub max_col: NonZeroU32,
|
|
/// Maximum policy file size in bytes (default: 1 MiB).
|
|
pub max_file_bytes: NonZeroUsize,
|
|
/// Maximum number of lines per policy file (default: 20 000).
|
|
pub max_lines: NonZeroUsize,
|
|
}
|
|
|
|
// Maximum column width to prevent overflow and catch pathological input.
|
|
// Lines exceeding this are likely minified/generated code or attack attempts.
|
|
pub const DEFAULT_MAX_COL: NonZeroU32 = NonZeroU32::new(1024).unwrap();
|
|
// Maximum allowed policy file size in bytes (1 MiB) to reject pathological inputs early.
|
|
pub const DEFAULT_MAX_FILE_BYTES: NonZeroUsize = NonZeroUsize::new(1_048_576).unwrap();
|
|
// Maximum allowed number of lines to avoid pathological or minified inputs.
|
|
pub const DEFAULT_MAX_LINES: NonZeroUsize = NonZeroUsize::new(20_000).unwrap();
|
|
|
|
impl Default for PolicyLengthConfig {
|
|
fn default() -> Self {
|
|
Self {
|
|
max_col: DEFAULT_MAX_COL,
|
|
max_file_bytes: DEFAULT_MAX_FILE_BYTES,
|
|
max_lines: DEFAULT_MAX_LINES,
|
|
}
|
|
}
|
|
}
|