Finn Bear

Thank you for submitting this pull request! We appreciate you spending the time to work on these changes. ## What is the motivation? A few code paths can be made...

Bugfix #1227 - Limit SurQL parser depth.

8

Thank you for submitting this pull request! We appreciate you spending the time to work on these changes. ## What is the motivation? 1. Parsing has exponential time complexity so...

Bug: Number's `Eq` and `Ord` implementations do not obey the standard library spec, due to the existence of NaN's

11

### Describe the bug In the presence of `Number::Float(NaN)`, neither the `Eq` nor `Ord` `impl`'s obey the specification of the standard library. - The `PartialEq` `impl` isn't reflexive (`NaN` !=...

Thank you for submitting this pull request! We appreciate you spending the time to work on these changes. ## What is the motivation? `f64::NAN` could make its way into `Value::{Number,...

Bug: Recursive parsing has an exponential time complexity

2

### Describe the bug The SurQL parser is **O(2n)** on `SELECT * FROM array::sort(array::sort(...array::sort([0])...))` where `n` is the number of nested function calls or subqueries. When `n` gets out of...

Thank you for submitting this pull request! We appreciate you spending the time to work on these changes. ## What is the motivation? The current `impl Display for Query` produces...

Given the ability to show the timestamp of each message, it would be nice to display it in the top bar for reference.

syscall/js: increase performance of Call, Invoke, and New by not allowing new slices to escape onto the heap

64

### What version of Go are you using (`go version`)? $ go version go version go1.14.4 linux/amd64 ### Does this issue reproduce with the latest release? Yes, in go1.15beta1 ###...

Rust playground: [here](https://play.rust-lang.org/?version=stable&mode=debug&edition=2021&gist=5b12be6cb1927d159bf1ea1c2c467334) ```rust extern crate serde; use std::collections::HashMap; use serde::Deserialize; fn main() { type T = HashMap; #[derive(Deserialize)] #[serde(untagged, bound(deserialize = "T: Deserialize

Add response size limit 2

2

## Motivation Allowing the server to send an arbitrarily large body creates a security vulnerability, namely memory exhaustion DoS. ## Changes - Adds `reponse_body_limit` knob to requests - (my contribution)...