Found during cdidx code-search audit. Evidence: src/CodeIndex/Cli/CdidxConfigFile.cs reads .cdidxrc.json with File.ReadAllText before normal command dispatch, and src/CodeIndex/Cli/WorkspaceManifest.cs does the same for workspace manifests. Impact: a very large local config or manifest can make otherwise simple commands allocate and parse unbounded input before reaching normal indexing file-size safeguards. Suggested fix: add explicit byte caps for these small JSON control files, stream or reject oversized files with actionable errors, and document the limits.
Found during cdidx code-search audit. Evidence:
src/CodeIndex/Cli/CdidxConfigFile.csreads.cdidxrc.jsonwithFile.ReadAllTextbefore normal command dispatch, andsrc/CodeIndex/Cli/WorkspaceManifest.csdoes the same for workspace manifests. Impact: a very large local config or manifest can make otherwise simple commands allocate and parse unbounded input before reaching normal indexing file-size safeguards. Suggested fix: add explicit byte caps for these small JSON control files, stream or reject oversized files with actionable errors, and document the limits.