[vector_graphics_compiler]: Fix Stack Overflow and CPU/Memory DoS on SVGs with circular references or exponential expansions#11740

Open

jeffkwoh wants to merge 9 commits into

flutter:mainfrom

jeffkwoh:add-upstream-test-coverage-20260519

Commits on May 23, 2026

[vector_graphics_compiler] Prevent stack overflow and DoS resource exhaustion
jeffkwoh
committed
Add unreferenced and multi-hop circular tests
jeffkwoh
committed
Update CHANGELOG.md: remove 'compile-time' from stack overflow fix description
jeffkwoh
committed
Refactor SVG safety limits: relocate constants and enforce global cumulative check
jeffkwoh
committed
Fix import sorting in resolver.dart
jeffkwoh
committed
Address PR review: lower expansion limit to 1000 and refactor safety tests using clean String interpolation
jeffkwoh
committed
docs: consistently align CHANGELOG.md with 1,000 expansions safety limit
jeffkwoh
committed
Add comment for recursive loop detection in parser.
jeffkwoh
authored
Add comments for recursive loop detection in resolver
jeffkwoh
authored