CSS: limit too many nested functions

tdewolff · Mar 9, 2023 · f70b78f · f70b78f
1 parent 32748bb
commit f70b78f
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/css/css.go b/css/css.go
@@ -51,6 +51,7 @@ type cssMinifier struct {
 	o *Minifier
 
 	tokenBuffer []Token
+	tokensLevel int
 }
 
 ////////////////////////////////////////////////////////////////
@@ -445,6 +446,11 @@ func (c *cssMinifier) writeDeclaration(values []Token, important bool) {
 }
 
 func (c *cssMinifier) minifyTokens(prop Hash, fun Hash, values []Token) []Token {
+	if 100 < c.tokensLevel+1 {
+		return values
+	}
+	c.tokensLevel++
+
 	for i, value := range values {
 		tt := value.TokenType
 		switch tt {
@@ -612,6 +618,7 @@ func (c *cssMinifier) minifyTokens(prop Hash, fun Hash, values []Token) []Token
 			}
 		}
 	}
+	c.tokensLevel--
 	return values
 }