Three robustness defects in the Markdown renderer, found by the engine and security reviews on main (8763ff3) and reproduced by running:
A small document can end the whole process instead of being reported as unsupported. Details are in the private audit ledger until the fix is released.
Some malformed HTML blocks make a document impossible to open (ArgumentOutOfRangeException while formatting raw text).
Render time grows faster than document size in two places: repeated heading titles, and raw HTML blocks with many short text runs. The parse cannot be cancelled.
Expected
Unsupported markup is refused as an ordinary error before any work that cannot be interrupted or recovered from.
Malformed blocks render (sanitized) instead of failing the open.
The renderer's own work is linear, and the outline build honours cancellation between its phases.
The threat model states what is and is not bounded.
## Problem
Three robustness defects in the Markdown renderer, found by the engine and security reviews on `main` (8763ff3) and reproduced by running:
- A small document can end the whole process instead of being reported as unsupported. Details are in the private audit ledger until the fix is released.
- Some malformed HTML blocks make a document impossible to open (`ArgumentOutOfRangeException` while formatting raw text).
- Render time grows faster than document size in two places: repeated heading titles, and raw HTML blocks with many short text runs. The parse cannot be cancelled.
## Expected
- Unsupported markup is refused as an ordinary error before any work that cannot be interrupted or recovered from.
- Malformed blocks render (sanitized) instead of failing the open.
- The renderer's own work is linear, and the outline build honours cancellation between its phases.
- The threat model states what is and is not bounded.
james.maes
added the bug label 2026-11-10 23:19:06 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Problem
Three robustness defects in the Markdown renderer, found by the engine and security reviews on
main(8763ff3) and reproduced by running:ArgumentOutOfRangeExceptionwhile formatting raw text).Expected