Struct Limits 

pub struct Limits {
    pub max_file_size: usize,
    pub max_line_length: usize,
    pub max_indent_depth: usize,
    pub max_nodes: usize,
    pub max_aliases: usize,
    pub max_columns: usize,
    pub max_nest_depth: usize,
    pub max_block_string_size: usize,
    pub max_object_keys: usize,
    pub max_total_keys: usize,
    pub max_total_ids: usize,
    pub timeout: Option<Duration>,
}

Configurable limits for parser security.

These limits protect against denial-of-service attacks and memory exhaustion by bounding the resources consumed during parsing.

Fields

max_file_size: usize

Maximum file size in bytes (default: 1GB).

max_line_length: usize

Maximum line length in bytes (default: 1MB).

max_indent_depth: usize

Maximum indent depth (default: 50).

max_nodes: usize

Maximum number of nodes (default: 10M).

max_aliases: usize

Maximum number of aliases (default: 10k).

max_columns: usize

Maximum columns per schema (default: 100).

max_nest_depth: usize

Maximum NEST hierarchy depth (default: 100).

max_block_string_size: usize

Maximum block string size in bytes (default: 10MB).

max_object_keys: usize

Maximum number of keys in a single object/map (default: 10k).

max_total_keys: usize

Maximum total number of keys across all objects (default: 10M).

This prevents DoS attacks where an attacker creates many small objects, each under the max_object_keys limit, but collectively consuming excessive memory. Provides defense-in-depth against memory exhaustion attacks.

Default is 10,000,000 keys, which allows for large documents while still providing protection against memory exhaustion. For very large datasets, this can be increased via ParseOptions.

max_total_ids: usize

Maximum total number of IDs across all types (default: 10M).

This prevents DoS attacks where an attacker registers many IDs across multiple types, each type under reasonable limits, but collectively consuming excessive memory in the TypeRegistry indices.

Default is 10,000,000 IDs, matching max_total_keys for consistency. The TypeRegistry maintains two indices (forward and inverted), so each ID registration consumes memory in both data structures.

timeout: Option<Duration>

Maximum parsing duration (default: 30 seconds).

Prevents denial-of-service attacks where a malicious document causes the parser to hang indefinitely. The parser checks elapsed time periodically and returns a Timeout error if parsing exceeds this duration.

Set to None to disable timeout checking (not recommended for untrusted input).

Implementations

impl Limits

pub fn unlimited() -> Self

Create limits with no restrictions (for testing).

Trait Implementations

impl Clone for Limits

fn clone(&self) -> Limits

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Limits

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Limits

fn default() -> Self

Returns the “default value” for a type.