overleaf/services/real-time/app/coffee/SafeJsonParse.coffee

Settings = require "settings-sharelatex"
logger = require "logger-sharelatex"

module.exports =
	parse: (data, callback = (error, parsed) ->) ->
		if data.length > Settings.maxUpdateSize
			logger.error {head: data.slice(0,1024), length: data.length}, "data too large to parse"
			return callback new Error("data too large to parse")
		try
			parsed = JSON.parse(data)
		catch e
			return callback e
		callback null, parsed
Add in limit on all JSON parsing 2015-12-01 11:05:49 +00:00			`Settings = require "settings-sharelatex"`
			`logger = require "logger-sharelatex"`

			`module.exports =`
			`parse: (data, callback = (error, parsed) ->) ->`
[misc] SafeJsonParse: align the size limit with the frontend->rt limit frontend -> real-time and doc-updater -> real-time should be in sync. Otherwise we can send a payload to doc-updater, but can not receive the confirmation of it -- and the client will send it again in a loop. Also log the size of the payload. 2020-03-24 08:14:15 +00:00			`if data.length > Settings.maxUpdateSize`
			`logger.error {head: data.slice(0,1024), length: data.length}, "data too large to parse"`
Add in limit on all JSON parsing 2015-12-01 11:05:49 +00:00			`return callback new Error("data too large to parse")`
			`try`
			`parsed = JSON.parse(data)`
			`catch e`
			`return callback e`
			`callback null, parsed`