Dylan M. Taylor 08109be362 security: validate settings sections against the defaults alone ...

deserialize_sections tried each top-level key against a document holding every key accepted
before it, cloning and deserializing the growing document per key. A config.toml with many
unknown keys took quadratic time (20k keys: >2 minutes, now <1 s). Each key is now checked
against the defaults plus that key, and accepted keys are merged once.

CodeRabbit CWE-407, crates/settings/src/document.rs:47

2026-10-22 21:42:13 -04:00

..

common

feat(settings): add shared config storage for Craft apps

2026-10-12 15:40:50 -06:00

memory.rs

feat(settings): add shared config storage for Craft apps

2026-10-12 15:40:50 -06:00

migrate.rs

feat(settings): add shared config storage for Craft apps

2026-10-12 15:40:50 -06:00

paths.rs

feat(settings): add shared config storage for Craft apps

2026-10-12 15:40:50 -06:00

recovery.rs

security: validate settings sections against the defaults alone

2026-10-22 21:42:13 -04:00

store.rs

feat(settings): add shared config storage for Craft apps

2026-10-12 15:40:50 -06:00