jekyll-documents 0.7.1 → 0.7.2

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aa2578d6c2919197cbd6a80f56d4b93a55e3a41c6bc9801b6344094460a5e764
-  data.tar.gz: 2905501bf1a5d4d7050852dbb7293d179cd9abd6a11218a7649f155ded19109e
+  metadata.gz: 884c3afc18e96312dcd25a2328f652ec8cb1417ad8ec26337b4aa4ee2f175517
+  data.tar.gz: 29e0d75b6b50c68acb124e0b31123cc85c3810789c39d562beb8da00c5c50a87
 SHA512:
-  metadata.gz: 899348532a7c8df6f816ed8795070c63881999f7f01b060332ae80f4b14ff183864f5543a1b63b20b461a1650cef16642ab4739148e9af763c590f55b416d357
-  data.tar.gz: e94844d7dd1614560fbbe0f8fe11d46a88f99e461aa778fc61cfc4765dfa26188d96986eebc46e693054ec3c6c4e3eb2a0661053c88278436cd1826000f3ed28
+  metadata.gz: c50ee45d94b33d62b344dadda31c9cf865d8d175de1b00e7c7f92aaeb046f0cef7fec3835de627e68ec0ce9849d925b8fbacb3012be5a5face435822c173b9c3
+  data.tar.gz: 3a28dee0ff0b8078cac42e4097676a991496e8510a38518bd7d6ea013275f2f9f804b15b5f4ab46e846f6ab2a5eaa8e72dfd4a535ed8a1b9c7cf338671a64019

data/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## [0.7.2] - 2026-09-09
+
+### Fixed
+- Replaced polynomial-time Liquid tag option regexes with a shared linear-time parser
+
 ## [0.7.1] - 2026-09-09
 
 ### Changed

data/lib/jekyll/documents/options_parser.rb

@@ -0,0 +1,43 @@
+# frozen_string_literal: true
+
+require "strscan"
+
+module Jekyll
+  module Documents
+    # Linear-time parser for Liquid tag markup key:value pairs.
+    # Replaces polynomial-redos-vulnerable regex scanning with
+    # anchored scans that advance through the input once.
+    module OptionsParser
+      module_function
+
+      def parse_options(markup)
+        scanner = StringScanner.new(markup.to_s)
+        options = {}
+
+        until scanner.eos?
+          scanner.skip(/\s+/)
+          break if scanner.eos?
+
+          key = scanner.scan(/\w+/)
+          unless key
+            scanner.getch
+            next
+          end
+
+          scanner.skip(/\s*/)
+          next unless scanner.scan(":")
+
+          scanner.skip(/\s*/)
+          value = if scanner.scan(/'([^']*)'/) || scanner.scan(/"([^"]*)"/)
+                    scanner[1]
+                  else
+                    scanner.scan(/\S+/)
+                  end
+          options[key] = value unless value.nil?
+        end
+
+        options
+      end
+    end
+  end
+end

data/lib/jekyll/documents/tags/doc_category.rb

@@ -152,13 +152,7 @@ module Jekyll
       end
 
       def extract_options(text)
-        options = {}
-        text.to_s.scan(
-          /(\w+)\s*:\s*(?:'([^']*)'|"([^"]*)"|([^\s]+))/
-        ) do |key, single, double, bare|
-          options[key] = single || double || bare
-        end
-        options
+        OptionsParser.parse_options(text)
       end
 
       def escape_html(value)

data/lib/jekyll/documents/tags/doc_link.rb

@@ -148,13 +148,7 @@ module Jekyll
       end
 
       def extract_options(text)
-        options = {}
-        text.to_s.scan(
-          /(\w+)\s*:\s*(?:'([^']*)'|"([^"]*)"|([^\s]+))/
-        ) do |key, single, double, bare|
-          options[key] = single || double || bare
-        end
-        options
+        OptionsParser.parse_options(text)
       end
 
       def escape_html(value)

data/lib/jekyll/documents/tags/document_icon.rb

@@ -45,13 +45,7 @@ module Jekyll
 
       def parse_markup(markup)
         expression = markup.to_s.strip[/\A[^\s]+/]
-        options = {}
-        markup.to_s.scan(
-          /(\w+)\s*:\s*(?:'([^']*)'|"([^"]*)"|([^\s]+))/
-        ) do |key, single, double, bare|
-          options[key] = single || double || bare
-        end
-        [expression, options]
+        [expression, OptionsParser.parse_options(markup)]
       end
 
       def escape_html(value)

data/lib/jekyll/documents/tags/latest_documents.rb

@@ -46,19 +46,9 @@ module Jekyll
                        })
       end
 
+      # supports: count:5 category:'referat'
       def parse_args(markup)
-        # supports: count:5 category:'referat'
-        args = {}
-        # Safe: markup comes from Jekyll template authors (trusted), not end users
-        # Runs only during static site generation, not on user requests
-        markup.scan(/(\w+)\s*:\s*'([^']*)'|(\w+)\s*:\s*([^\s]+)/).each do |match|
-          if match[0]
-            args[match[0]] = match[1]
-          else
-            args[match[2]] = match[3]
-          end
-        end
-        args
+        OptionsParser.parse_options(markup)
       end
     end
   end

data/lib/jekyll/documents/version.rb

@@ -2,6 +2,6 @@
 
 module Jekyll
   module Documents
-    VERSION = "0.7.1"
+    VERSION = "0.7.2"
   end
 end

data/lib/jekyll-documents.rb

@@ -11,6 +11,7 @@ require_relative "jekyll/documents/text_extraction_manifest"
 require_relative "jekyll/documents/assets_generator"
 require_relative "jekyll/documents/json_index_generator"
 require_relative "jekyll/documents/layout_registrar"
+require_relative "jekyll/documents/options_parser"
 
 # Liquid tag(s)
 require_relative "jekyll/documents/tags/latest_documents"

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: jekyll-documents
 version: !ruby/object:Gem::Version
-  version: 0.7.1
+  version: 0.7.2
 platform: ruby
 authors:
 - Svend Gundestrup
@@ -154,6 +154,7 @@ files:
 - lib/jekyll/documents/generator.rb
 - lib/jekyll/documents/json_index_generator.rb
 - lib/jekyll/documents/layout_registrar.rb
+- lib/jekyll/documents/options_parser.rb
 - lib/jekyll/documents/tags/doc_category.rb
 - lib/jekyll/documents/tags/doc_link.rb
 - lib/jekyll/documents/tags/document_icon.rb