In configuration settings of the Jint JS engine was added one new property - MaxJsonParseDepth (default 64)

Author: Taritsyn

src/JavaScriptEngineSwitcher.Jint/JavaScriptEngineSwitcher.Jint.csproj

@@ -21,8 +21,7 @@
     <Description>JavaScriptEngineSwitcher.Jint contains adapter `JintJsEngine` (wrapper for the Jint JavaScript Engine (http://github.com/sebastienros/jint) version 3.0.0 Beta 2049).</Description>
     <PackageTags>$(PackageCommonTags);Jint</PackageTags>
     <PackageIconFullPath>../../Icons/JavaScriptEngineSwitcher_Jint_Logo128x128.png</PackageIconFullPath>
-    <PackageReleaseNotes>1. Jint was updated to version 3.0.0 Beta 2049;
-2. Added support of .NET 6.</PackageReleaseNotes>
+    <PackageReleaseNotes>In configuration settings of the Jint JS engine was added one new property - `MaxJsonParseDepth` (default `64`).</PackageReleaseNotes>
   </PropertyGroup>
 
   <ItemGroup>

src/JavaScriptEngineSwitcher.Jint/JintJsEngine.cs

@@ -131,6 +131,7 @@ public JintJsEngine(JintSettings settings)
 						.LimitRecursion(jintSettings.MaxRecursionDepth)
 						.LocalTimeZone(jintSettings.LocalTimeZone ?? TimeZoneInfo.Local)
 						.MaxArraySize(jintSettings.MaxArraySize)
+						.MaxJsonParseDepth(jintSettings.MaxJsonParseDepth)
 						.MaxStatements(jintSettings.MaxStatements)
 						.Strict(jintSettings.StrictMode)
 						.TimeoutInterval(jintSettings.TimeoutInterval)

src/JavaScriptEngineSwitcher.Jint/JintSettings.cs

@@ -97,6 +97,15 @@ public uint MaxArraySize
 			set;
 		}
 
+		/// <summary>
+		/// Gets or sets a maximum depth allowed when parsing JSON data using the <c>JSON.parse</c> static method
+		/// </summary>
+		public int MaxJsonParseDepth
+		{
+			get;
+			set;
+		}
+
 		/// <summary>
 		/// Gets or sets a maximum allowed depth of recursion:
 		///    <c>-1</c> - recursion without limits;
@@ -181,6 +190,7 @@ public JintSettings()
 			EnableDebugging = false;
 			LocalTimeZone = TimeZoneInfo.Local;
 			MaxArraySize = uint.MaxValue;
+			MaxJsonParseDepth = 64;
 			MaxRecursionDepth = -1;
 			MaxStatements = 0;
 			MemoryLimit = 0;

src/JavaScriptEngineSwitcher.Jint/readme.txt

@@ -18,8 +18,8 @@
    =============
    RELEASE NOTES
    =============
-   1. Jint was updated to version 3.0.0 Beta 2049;
-   2. Added support of .NET 6.
+   In configuration settings of the Jint JS engine was added one new property -
+   `MaxJsonParseDepth` (default `64`).
 
    =============
    DOCUMENTATION

test/JavaScriptEngineSwitcher.Tests/Jint/CommonTests.cs

@@ -250,6 +250,63 @@ public void MappingRuntimeErrorDuringArraySizeExceeded()
 			Assert.Equal("The array size 1000000000 is larger than maximum allowed (1000000)", exception.Description);
 		}
 
+		[Fact]
+		public void MappingRuntimeErrorDuringMaxJsonParseDepthReached()
+		{
+			// Arrange
+			const string input = @"var data = '{\n' +
+	'	""menu"": {\n' +
+	'		""id"": ""file"",\n' +
+	'		""value"": ""File"",\n' +
+	'		""popup"": {\n' +
+	'			""menuItem"": [\n' +
+	'				{ ""value"": ""New"", ""onclick"": ""CreateNewDoc()"" },\n' +
+	'				{ ""value"": ""Open"", ""onclick"": ""OpenDoc()"" },\n' +
+	'				{ ""value"": ""Close"", ""onclick"": ""CloseDoc()"" }\n' +
+	'			]\n' +
+	'		}\n' +
+	'	}\n' +
+	'}'
+	;
+
+JSON.parse(data);";
+
+			JsRuntimeException exception = null;
+
+			// Act
+			using (var jsEngine = new JintJsEngine(
+				new JintSettings
+				{
+					MaxJsonParseDepth = 4
+				}
+			))
+			{
+				try
+				{
+					jsEngine.Execute(input, "menu.js");
+				}
+				catch (JsRuntimeException e)
+				{
+					exception = e;
+				}
+			}
+
+			// Assert
+			Assert.NotNull(exception);
+			Assert.Equal("Runtime error", exception.Category);
+			Assert.Equal("Max. depth level of JSON reached at position 82", exception.Description);
+			Assert.Equal("SyntaxError", exception.Type);
+			Assert.Equal("menu.js", exception.DocumentName);
+			Assert.Equal(16, exception.LineNumber);
+			Assert.Equal(1, exception.ColumnNumber);
+			Assert.Empty(exception.SourceFragment);
+			Assert.Equal(
+				"   at Global code (parse menu.js:16:12)" + Environment.NewLine +
+				"   at Global code (menu.js:16:1)",
+				exception.CallStack
+			);
+		}
+
 		[Fact]
 		public void MappingRuntimeErrorDuringRecursionDepthOverflow()
 		{