snowykami/meilisearch
1
0
Fork 0
mirror of https://github.com/meilisearch/meilisearch.git synced 2024-11-25 11:35:05 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Restrict even more the Rhai engine

Browse Source
This commit is contained in:
Clément Renault 2024-07-09 15:50:37 +02:00
parent 487997f6ad
commit 837274f853
No known key found for this signature in database
GPG Key ID: F250A4C4E3AE5F5F
2 changed files with 877 additions and 595 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1464
Cargo.lock generated
View File

File diff suppressed because it is too large Load Diff

8
milli/src/update/index_documents/mod.rs
View File

@ -197,10 +197,18 @@ where
output
}
// Setup the security and limits of the Engine
let mut engine = Engine::new();
engine.set_optimization_level(OptimizationLevel::Full);
engine.set_max_call_levels(1000);
// It is an arbitrary value. We need to let users define this in the settings.
engine.set_max_operations(1_000_000);
engine.set_max_variables(1000);
engine.set_max_functions(30);
engine.set_max_expr_depths(100, 1000);
engine.set_max_string_size(1024 * 1024 * 1024); // 1 GiB
engine.set_max_array_size(10_000);
engine.set_max_map_size(10_000);
let ast = engine.compile(code).map_err(UserError::DocumentEditionCompilationError)?;
let fields_ids_map = self.index.fields_ids_map(self.wtxn)?;