fix(rendering): refuse unsupported markup as an error and keep large documents linear #50

Open
opened 2026-11-10 23:19:06 +00:00 by james.maes · 0 comments
Owner

Problem

Three robustness defects in the Markdown renderer, found by the engine and security reviews on main (8763ff3) and reproduced by running:

  • A small document can end the whole process instead of being reported as unsupported. Details are in the private audit ledger until the fix is released.
  • Some malformed HTML blocks make a document impossible to open (ArgumentOutOfRangeException while formatting raw text).
  • Render time grows faster than document size in two places: repeated heading titles, and raw HTML blocks with many short text runs. The parse cannot be cancelled.

Expected

  • Unsupported markup is refused as an ordinary error before any work that cannot be interrupted or recovered from.
  • Malformed blocks render (sanitized) instead of failing the open.
  • The renderer's own work is linear, and the outline build honours cancellation between its phases.
  • The threat model states what is and is not bounded.
## Problem Three robustness defects in the Markdown renderer, found by the engine and security reviews on `main` (8763ff3) and reproduced by running: - A small document can end the whole process instead of being reported as unsupported. Details are in the private audit ledger until the fix is released. - Some malformed HTML blocks make a document impossible to open (`ArgumentOutOfRangeException` while formatting raw text). - Render time grows faster than document size in two places: repeated heading titles, and raw HTML blocks with many short text runs. The parse cannot be cancelled. ## Expected - Unsupported markup is refused as an ordinary error before any work that cannot be interrupted or recovered from. - Malformed blocks render (sanitized) instead of failing the open. - The renderer's own work is linear, and the outline build honours cancellation between its phases. - The threat model states what is and is not bounded.
james.maes added the bug label 2026-11-10 23:19:06 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: KofTwentyTwo/MarkdownViewr.Windows#50