From 39596115da29f114cca8d16f32949ec59f26abfb Mon Sep 17 00:00:00 2001
From: Giteabot <teabot@gitea.io>
Date: Thu, 2 Nov 2023 05:26:45 +0800
Subject: [PATCH] Change katex limits (#27823) (#27868)

Backport #27823 by @KN4CK3R

Fixes #27812

Use higher defaults again but limit the input size.


![grafik](https://github.com/go-gitea/gitea/assets/1666336/23cdf572-de30-4799-b9cf-ef386b1623b9)

Co-authored-by: KN4CK3R <admin@oldschoolhack.me>
---
 web_src/js/markup/math.js | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/web_src/js/markup/math.js b/web_src/js/markup/math.js
index 8427637a0f..872e50a452 100644
--- a/web_src/js/markup/math.js
+++ b/web_src/js/markup/math.js
@@ -15,18 +15,28 @@ export async function renderMath() {
     import(/* webpackChunkName: "katex" */'katex/dist/katex.css'),
   ]);
 
+  const MAX_CHARS = 1000;
+  const MAX_SIZE = 25;
+  const MAX_EXPAND = 1000;
+
   for (const el of els) {
     const target = targetElement(el);
     if (target.hasAttribute('data-render-done')) continue;
     const source = el.textContent;
+
+    if (source.length > MAX_CHARS) {
+      displayError(target, new Error(`Math source of ${source.length} characters exceeds the maximum allowed length of ${MAX_CHARS}.`));
+      continue;
+    }
+
     const displayMode = el.classList.contains('display');
     const nodeName = displayMode ? 'p' : 'span';
 
     try {
       const tempEl = document.createElement(nodeName);
       katex.render(source, tempEl, {
-        maxSize: 25,
-        maxExpand: 50,
+        maxSize: MAX_SIZE,
+        maxExpand: MAX_EXPAND,
         displayMode,
       });
       target.replaceWith(tempEl);