open/llm-ingestion-pipeline-security
1
0
Fork 0
Code Issues Releases 4 Activity
4 releases 13 tags
  • v0.3.2 75ae48277b

    v0.3.2 - DoS fix: 19 quadratic regex runs on the output path

    ktg released this 2026-07-31 19:16:53 +00:00 | 52 commits to main since this release

    Crafted input could make one scan_output call run for ~5.7 hours at the
    1,000,000-char input the gate itself accepts (measured: 458.7s for a 300KB
    payload; size-matched prose 0.31s). max_scan_chars bounds the input, not the
    runtime.

    Two known behaviour changes, both measured against v0.3.1 and listed in the
    changelog: a >256-char JWT used as a DB password loses its CRITICAL label
    (PRESET_TRUSTED_SOURCE drops fail_secure -> quarantine_review; PRESET_USER_UPLOAD
    unchanged), and hybrid-xss:script-tag now fires on prose mentioning

    Downloads