CSS: prevent quasi-infinite recursion in background's append, from OS…

…SFuzz
tdewolff · Feb 7, 2021 · 2873b21 · 2873b21
1 parent 210427e
commit 2873b21
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/css/css.go b/css/css.go
@@ -610,6 +610,11 @@ func (c *cssMinifier) minifyTokens(prop Hash, values []Token) []Token {
 }
 
 func (c *cssMinifier) minifyProperty(prop Hash, values []Token) []Token {
+	// limit maximum to prevent slow recursions (e.g. for background's append)
+	if 100 < len(values) {
+		return values
+	}
+
 	switch prop {
 	case Font:
 		if len(values) > 1 { // must contain atleast font-size and font-family