Skip to content

fix(config): add depth limit to deep_merge on non-sync paths (#3931)#3964

Merged
mrveiss merged 1 commit intoDev_new_guifrom
fix/issue-3931
Apr 8, 2026
Merged

fix(config): add depth limit to deep_merge on non-sync paths (#3931)#3964
mrveiss merged 1 commit intoDev_new_guifrom
fix/issue-3931

Conversation

@mrveiss
Copy link
Copy Markdown
Owner

@mrveiss mrveiss commented Apr 8, 2026

Closes #3931

- Added max_depth parameter with default 10
- Added current_depth tracking to prevent DoS via nesting bombs
- Raises ValueError when max_depth exceeded
- Includes comprehensive test coverage

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@mrveiss mrveiss merged commit c86c67e into Dev_new_gui Apr 8, 2026
1 of 4 checks passed
@mrveiss mrveiss deleted the fix/issue-3931 branch April 8, 2026 08:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant