plone / guillotina

Python AsyncIO data API to manage billions of resources
https://guillotina.readthedocs.io/en/latest/
Other
187 stars 51 forks source link

add max_content_depth limit #1098

Closed lferran closed 1 year ago

lferran commented 3 years ago

This PR does:

The motivation behind it is because there are some recursive functions in guillotina ( see cached_principal_perimssion, for instance) where if we don't put a limit, we could run into python throwing RecursionError. We've found this at Onna.

I'll forward-port once we agree on the solution and it's merged.

vangheem commented 3 years ago

@bloodbare @masipcat how do you feel about this?

masipcat commented 3 years ago

It's ok for me to add it, but I think it's still possible to bypass this restriction when moving folder