From b0463ff30f65c84138bb9be5c463fe425019a3d3 Mon Sep 17 00:00:00 2001 From: Samuel Williams Date: Thu, 20 Aug 2026 17:40:11 +1200 Subject: [PATCH] Document cmark table protections --- releases.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/releases.md b/releases.md index 7bbda6c..b218c00 100644 --- a/releases.md +++ b/releases.md @@ -6,7 +6,9 @@ ## v0.16.0 - - Update `cmark-gfm` from upstream, including a denial-of-service fix for tables with a large number of autocompleted cells, corrected `end_line` source positions for single-line and multi-line HTML blocks, and a fix for trailing newlines when rendering inline nodes. + - Update `cmark-gfm` from upstream, including two table-rendering protections: avoid repeatedly scanning preceding cells, and limit the number of automatically completed cells to prevent denial of service. + - Correct `end_line` source positions for single-line and multi-line HTML blocks. + - Fix trailing newlines when rendering inline nodes. - Add support for front matter (`CMARK_OPT_FRONT_MATTER`): a `---` delimited block at the start of a document is captured as a `CMARK_NODE_FRONT_MATTER` node. The raw content is available via `node.string_content` and an optional format hint (e.g. `"yaml"`, `"toml"`) via `node.fence_info`. - Allow `:` in HTML tag names to support XML namespace prefixes (e.g. ``, ``).