From 28c7a72db7abab2670142c2a4943b559fa8e7644 Mon Sep 17 00:00:00 2001
From: npt-1707 <npthanh132@gmail.com>
Date: Fri, 8 May 2026 01:33:42 +0700
Subject: [PATCH] playground/jspm/vendor/cssx-transpiler.js: Limit str to 100
 to avoid ReDoS of 0.3s

---
 playground/jspm/vendor/cssx-transpiler.js | 268 +++++++++++-----------
 1 file changed, 134 insertions(+), 134 deletions(-)

diff --git a/playground/jspm/vendor/cssx-transpiler.js b/playground/jspm/vendor/cssx-transpiler.js
index 25bac7c..f9d274c 100644
--- a/playground/jspm/vendor/cssx-transpiler.js
+++ b/playground/jspm/vendor/cssx-transpiler.js
@@ -6787,9 +6787,9 @@ return /******/ (function(modules) { // webpackBootstrap
 	  return is ? document.createElement(it) : {};
 	};
 	},{"./_global":55,"./_is-object":62}],51:[function(require,module,exports){
-	// IE 8- don't enum bug keys
-	module.exports = (
-	  'constructor,hasOwnProperty,isPrototypeOf,propertyIsEnumerable,toLocaleString,toString,valueOf'
+	// IE 8- don't enum bug keys
+	module.exports = (
+	  'constructor,hasOwnProperty,isPrototypeOf,propertyIsEnumerable,toLocaleString,toString,valueOf'
 	).split(',');
 	},{}],52:[function(require,module,exports){
 	// all enumerable object keys, includes symbols
@@ -6899,8 +6899,8 @@ return /******/ (function(modules) { // webpackBootstrap
 	},{"./_descriptors":49,"./_object-dp":71,"./_property-desc":82}],58:[function(require,module,exports){
 	module.exports = require('./_global').document && document.documentElement;
 	},{"./_global":55}],59:[function(require,module,exports){
-	module.exports = !require('./_descriptors') && !require('./_fails')(function(){
-	  return Object.defineProperty(require('./_dom-create')('div'), 'a', {get: function(){ return 7; }}).a != 7;
+	module.exports = !require('./_descriptors') && !require('./_fails')(function(){
+	  return Object.defineProperty(require('./_dom-create')('div'), 'a', {get: function(){ return 7; }}).a != 7;
 	});
 	},{"./_descriptors":49,"./_dom-create":50,"./_fails":54}],60:[function(require,module,exports){
 	// fallback for non-array-like ES3 and non-enumerable old V8 strings
@@ -7077,45 +7077,45 @@ return /******/ (function(modules) { // webpackBootstrap
 	  onFreeze: onFreeze
 	};
 	},{"./_fails":54,"./_has":56,"./_is-object":62,"./_object-dp":71,"./_uid":95}],70:[function(require,module,exports){
-	// 19.1.2.2 / 15.2.3.5 Object.create(O [, Properties])
-	var anObject    = require('./_an-object')
-	  , dPs         = require('./_object-dps')
-	  , enumBugKeys = require('./_enum-bug-keys')
-	  , IE_PROTO    = require('./_shared-key')('IE_PROTO')
-	  , Empty       = function(){ /* empty */ }
-	  , PROTOTYPE   = 'prototype';
-	
-	// Create object with fake `null` prototype: use iframe Object with cleared prototype
-	var createDict = function(){
-	  // Thrash, waste and sodomy: IE GC bug
-	  var iframe = require('./_dom-create')('iframe')
-	    , i      = enumBugKeys.length
-	    , gt     = '>'
-	    , iframeDocument;
-	  iframe.style.display = 'none';
-	  require('./_html').appendChild(iframe);
-	  iframe.src = 'javascript:'; // eslint-disable-line no-script-url
-	  // createDict = iframe.contentWindow.Object;
-	  // html.removeChild(iframe);
-	  iframeDocument = iframe.contentWindow.document;
-	  iframeDocument.open();
-	  iframeDocument.write('<script>document.F=Object</script' + gt);
-	  iframeDocument.close();
-	  createDict = iframeDocument.F;
-	  while(i--)delete createDict[PROTOTYPE][enumBugKeys[i]];
-	  return createDict();
-	};
-	
-	module.exports = Object.create || function create(O, Properties){
-	  var result;
-	  if(O !== null){
-	    Empty[PROTOTYPE] = anObject(O);
-	    result = new Empty;
-	    Empty[PROTOTYPE] = null;
-	    // add "__proto__" for Object.getPrototypeOf polyfill
-	    result[IE_PROTO] = O;
-	  } else result = createDict();
-	  return Properties === undefined ? result : dPs(result, Properties);
+	// 19.1.2.2 / 15.2.3.5 Object.create(O [, Properties])
+	var anObject    = require('./_an-object')
+	  , dPs         = require('./_object-dps')
+	  , enumBugKeys = require('./_enum-bug-keys')
+	  , IE_PROTO    = require('./_shared-key')('IE_PROTO')
+	  , Empty       = function(){ /* empty */ }
+	  , PROTOTYPE   = 'prototype';
+	
+	// Create object with fake `null` prototype: use iframe Object with cleared prototype
+	var createDict = function(){
+	  // Thrash, waste and sodomy: IE GC bug
+	  var iframe = require('./_dom-create')('iframe')
+	    , i      = enumBugKeys.length
+	    , gt     = '>'
+	    , iframeDocument;
+	  iframe.style.display = 'none';
+	  require('./_html').appendChild(iframe);
+	  iframe.src = 'javascript:'; // eslint-disable-line no-script-url
+	  // createDict = iframe.contentWindow.Object;
+	  // html.removeChild(iframe);
+	  iframeDocument = iframe.contentWindow.document;
+	  iframeDocument.open();
+	  iframeDocument.write('<script>document.F=Object</script' + gt);
+	  iframeDocument.close();
+	  createDict = iframeDocument.F;
+	  while(i--)delete createDict[PROTOTYPE][enumBugKeys[i]];
+	  return createDict();
+	};
+	
+	module.exports = Object.create || function create(O, Properties){
+	  var result;
+	  if(O !== null){
+	    Empty[PROTOTYPE] = anObject(O);
+	    result = new Empty;
+	    Empty[PROTOTYPE] = null;
+	    // add "__proto__" for Object.getPrototypeOf polyfill
+	    result[IE_PROTO] = O;
+	  } else result = createDict();
+	  return Properties === undefined ? result : dPs(result, Properties);
 	};
 	},{"./_an-object":42,"./_dom-create":50,"./_enum-bug-keys":51,"./_html":58,"./_object-dps":72,"./_shared-key":86}],71:[function(require,module,exports){
 	var anObject       = require('./_an-object')
@@ -7135,35 +7135,35 @@ return /******/ (function(modules) { // webpackBootstrap
 	  return O;
 	};
 	},{"./_an-object":42,"./_descriptors":49,"./_ie8-dom-define":59,"./_to-primitive":94}],72:[function(require,module,exports){
-	var dP       = require('./_object-dp')
-	  , anObject = require('./_an-object')
-	  , getKeys  = require('./_object-keys');
-	
-	module.exports = require('./_descriptors') ? Object.defineProperties : function defineProperties(O, Properties){
-	  anObject(O);
-	  var keys   = getKeys(Properties)
-	    , length = keys.length
-	    , i = 0
-	    , P;
-	  while(length > i)dP.f(O, P = keys[i++], Properties[P]);
-	  return O;
+	var dP       = require('./_object-dp')
+	  , anObject = require('./_an-object')
+	  , getKeys  = require('./_object-keys');
+	
+	module.exports = require('./_descriptors') ? Object.defineProperties : function defineProperties(O, Properties){
+	  anObject(O);
+	  var keys   = getKeys(Properties)
+	    , length = keys.length
+	    , i = 0
+	    , P;
+	  while(length > i)dP.f(O, P = keys[i++], Properties[P]);
+	  return O;
 	};
 	},{"./_an-object":42,"./_descriptors":49,"./_object-dp":71,"./_object-keys":79}],73:[function(require,module,exports){
-	var pIE            = require('./_object-pie')
-	  , createDesc     = require('./_property-desc')
-	  , toIObject      = require('./_to-iobject')
-	  , toPrimitive    = require('./_to-primitive')
-	  , has            = require('./_has')
-	  , IE8_DOM_DEFINE = require('./_ie8-dom-define')
-	  , gOPD           = Object.getOwnPropertyDescriptor;
-	
-	exports.f = require('./_descriptors') ? gOPD : function getOwnPropertyDescriptor(O, P){
-	  O = toIObject(O);
-	  P = toPrimitive(P, true);
-	  if(IE8_DOM_DEFINE)try {
-	    return gOPD(O, P);
-	  } catch(e){ /* empty */ }
-	  if(has(O, P))return createDesc(!pIE.f.call(O, P), O[P]);
+	var pIE            = require('./_object-pie')
+	  , createDesc     = require('./_property-desc')
+	  , toIObject      = require('./_to-iobject')
+	  , toPrimitive    = require('./_to-primitive')
+	  , has            = require('./_has')
+	  , IE8_DOM_DEFINE = require('./_ie8-dom-define')
+	  , gOPD           = Object.getOwnPropertyDescriptor;
+	
+	exports.f = require('./_descriptors') ? gOPD : function getOwnPropertyDescriptor(O, P){
+	  O = toIObject(O);
+	  P = toPrimitive(P, true);
+	  if(IE8_DOM_DEFINE)try {
+	    return gOPD(O, P);
+	  } catch(e){ /* empty */ }
+	  if(has(O, P))return createDesc(!pIE.f.call(O, P), O[P]);
 	};
 	},{"./_descriptors":49,"./_has":56,"./_ie8-dom-define":59,"./_object-pie":80,"./_property-desc":82,"./_to-iobject":91,"./_to-primitive":94}],74:[function(require,module,exports){
 	// fallback for IE11 buggy Object.getOwnPropertyNames with iframe and window
@@ -7186,54 +7186,54 @@ return /******/ (function(modules) { // webpackBootstrap
 	  return windowNames && toString.call(it) == '[object Window]' ? getWindowNames(it) : gOPN(toIObject(it));
 	};
 	},{"./_object-gopn":75,"./_to-iobject":91}],75:[function(require,module,exports){
-	// 19.1.2.7 / 15.2.3.4 Object.getOwnPropertyNames(O)
-	var $keys      = require('./_object-keys-internal')
-	  , hiddenKeys = require('./_enum-bug-keys').concat('length', 'prototype');
-	
-	exports.f = Object.getOwnPropertyNames || function getOwnPropertyNames(O){
-	  return $keys(O, hiddenKeys);
+	// 19.1.2.7 / 15.2.3.4 Object.getOwnPropertyNames(O)
+	var $keys      = require('./_object-keys-internal')
+	  , hiddenKeys = require('./_enum-bug-keys').concat('length', 'prototype');
+	
+	exports.f = Object.getOwnPropertyNames || function getOwnPropertyNames(O){
+	  return $keys(O, hiddenKeys);
 	};
 	},{"./_enum-bug-keys":51,"./_object-keys-internal":78}],76:[function(require,module,exports){
 	exports.f = Object.getOwnPropertySymbols;
 	},{}],77:[function(require,module,exports){
-	// 19.1.2.9 / 15.2.3.2 Object.getPrototypeOf(O)
-	var has         = require('./_has')
-	  , toObject    = require('./_to-object')
-	  , IE_PROTO    = require('./_shared-key')('IE_PROTO')
-	  , ObjectProto = Object.prototype;
-	
-	module.exports = Object.getPrototypeOf || function(O){
-	  O = toObject(O);
-	  if(has(O, IE_PROTO))return O[IE_PROTO];
-	  if(typeof O.constructor == 'function' && O instanceof O.constructor){
-	    return O.constructor.prototype;
-	  } return O instanceof Object ? ObjectProto : null;
+	// 19.1.2.9 / 15.2.3.2 Object.getPrototypeOf(O)
+	var has         = require('./_has')
+	  , toObject    = require('./_to-object')
+	  , IE_PROTO    = require('./_shared-key')('IE_PROTO')
+	  , ObjectProto = Object.prototype;
+	
+	module.exports = Object.getPrototypeOf || function(O){
+	  O = toObject(O);
+	  if(has(O, IE_PROTO))return O[IE_PROTO];
+	  if(typeof O.constructor == 'function' && O instanceof O.constructor){
+	    return O.constructor.prototype;
+	  } return O instanceof Object ? ObjectProto : null;
 	};
 	},{"./_has":56,"./_shared-key":86,"./_to-object":93}],78:[function(require,module,exports){
-	var has          = require('./_has')
-	  , toIObject    = require('./_to-iobject')
-	  , arrayIndexOf = require('./_array-includes')(false)
-	  , IE_PROTO     = require('./_shared-key')('IE_PROTO');
-	
-	module.exports = function(object, names){
-	  var O      = toIObject(object)
-	    , i      = 0
-	    , result = []
-	    , key;
-	  for(key in O)if(key != IE_PROTO)has(O, key) && result.push(key);
-	  // Don't enum bug & hidden keys
-	  while(names.length > i)if(has(O, key = names[i++])){
-	    ~arrayIndexOf(result, key) || result.push(key);
-	  }
-	  return result;
+	var has          = require('./_has')
+	  , toIObject    = require('./_to-iobject')
+	  , arrayIndexOf = require('./_array-includes')(false)
+	  , IE_PROTO     = require('./_shared-key')('IE_PROTO');
+	
+	module.exports = function(object, names){
+	  var O      = toIObject(object)
+	    , i      = 0
+	    , result = []
+	    , key;
+	  for(key in O)if(key != IE_PROTO)has(O, key) && result.push(key);
+	  // Don't enum bug & hidden keys
+	  while(names.length > i)if(has(O, key = names[i++])){
+	    ~arrayIndexOf(result, key) || result.push(key);
+	  }
+	  return result;
 	};
 	},{"./_array-includes":43,"./_has":56,"./_shared-key":86,"./_to-iobject":91}],79:[function(require,module,exports){
-	// 19.1.2.14 / 15.2.3.14 Object.keys(O)
-	var $keys       = require('./_object-keys-internal')
-	  , enumBugKeys = require('./_enum-bug-keys');
-	
-	module.exports = Object.keys || function keys(O){
-	  return $keys(O, enumBugKeys);
+	// 19.1.2.14 / 15.2.3.14 Object.keys(O)
+	var $keys       = require('./_object-keys-internal')
+	  , enumBugKeys = require('./_enum-bug-keys');
+	
+	module.exports = Object.keys || function keys(O){
+	  return $keys(O, enumBugKeys);
 	};
 	},{"./_enum-bug-keys":51,"./_object-keys-internal":78}],80:[function(require,module,exports){
 	exports.f = {}.propertyIsEnumerable;
@@ -7294,10 +7294,10 @@ return /******/ (function(modules) { // webpackBootstrap
 	  if(it && !has(it = stat ? it : it.prototype, TAG))def(it, TAG, {configurable: true, value: tag});
 	};
 	},{"./_has":56,"./_object-dp":71,"./_wks":96}],86:[function(require,module,exports){
-	var shared = require('./_shared')('keys')
-	  , uid    = require('./_uid');
-	module.exports = function(key){
-	  return shared[key] || (shared[key] = uid(key));
+	var shared = require('./_shared')('keys')
+	  , uid    = require('./_uid');
+	module.exports = function(key){
+	  return shared[key] || (shared[key] = uid(key));
 	};
 	},{"./_shared":87,"./_uid":95}],87:[function(require,module,exports){
 	var global = require('./_global')
@@ -7440,12 +7440,12 @@ return /******/ (function(modules) { // webpackBootstrap
 	addToUnscopables('values');
 	addToUnscopables('entries');
 	},{"./_add-to-unscopables":41,"./_iter-define":64,"./_iter-step":65,"./_iterators":66,"./_to-iobject":91}],100:[function(require,module,exports){
-	var $export = require('./_export')
-	// 19.1.2.2 / 15.2.3.5 Object.create(O [, Properties])
+	var $export = require('./_export')
+	// 19.1.2.2 / 15.2.3.5 Object.create(O [, Properties])
 	$export($export.S, 'Object', {create: require('./_object-create')});
 	},{"./_export":53,"./_object-create":70}],101:[function(require,module,exports){
-	var $export = require('./_export');
-	// 19.1.2.4 / 15.2.3.6 Object.defineProperty(O, P, Attributes)
+	var $export = require('./_export');
+	// 19.1.2.4 / 15.2.3.6 Object.defineProperty(O, P, Attributes)
 	$export($export.S + $export.F * !require('./_descriptors'), 'Object', {defineProperty: require('./_object-dp').f});
 	},{"./_descriptors":49,"./_export":53,"./_object-dp":71}],102:[function(require,module,exports){
 	// 19.1.2.9 Object.getPrototypeOf(O)
@@ -10530,8 +10530,8 @@ return /******/ (function(modules) { // webpackBootstrap
 	  return object;
 	};
 	},{"./_descriptors":28,"./_object-dp":36,"./_property-desc":37}],34:[function(require,module,exports){
-	module.exports = !require('./_descriptors') && !require('./_fails')(function(){
-	  return Object.defineProperty(require('./_dom-create')('div'), 'a', {get: function(){ return 7; }}).a != 7;
+	module.exports = !require('./_descriptors') && !require('./_fails')(function(){
+	  return Object.defineProperty(require('./_dom-create')('div'), 'a', {get: function(){ return 7; }}).a != 7;
 	});
 	},{"./_descriptors":28,"./_dom-create":29,"./_fails":31}],35:[function(require,module,exports){
 	module.exports = function(it){
@@ -10577,8 +10577,8 @@ return /******/ (function(modules) { // webpackBootstrap
 	  throw TypeError("Can't convert object to primitive value");
 	};
 	},{"./_is-object":35}],39:[function(require,module,exports){
-	var $export = require('./_export');
-	// 19.1.2.4 / 15.2.3.6 Object.defineProperty(O, P, Attributes)
+	var $export = require('./_export');
+	// 19.1.2.4 / 15.2.3.6 Object.defineProperty(O, P, Attributes)
 	$export($export.S + $export.F * !require('./_descriptors'), 'Object', {defineProperty: require('./_object-dp').f});
 	},{"./_descriptors":28,"./_export":30,"./_object-dp":36}]},{},[4])(4)
 	});
@@ -27270,7 +27270,7 @@ return /******/ (function(modules) { // webpackBootstrap
 	
 	function parse(str) {
 	  str = '' + str;
-	  if (str.length > 10000) return;
+	  if (str.length > 100) return;
 	  var match = /^((?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|years?|yrs?|y)?$/i.exec(str);
 	  if (!match) return;
 	  var n = parseFloat(match[1]);
@@ -33258,16 +33258,16 @@ return /******/ (function(modules) { // webpackBootstrap
 /* 282 */
 /***/ function(module, exports) {
 
-	module.exports = function(module) {
-		if(!module.webpackPolyfill) {
-			module.deprecate = function() {};
-			module.paths = [];
-			// module.parent = undefined by default
-			module.children = [];
-			module.webpackPolyfill = 1;
-		}
-		return module;
-	}
+	module.exports = function(module) {
+		if(!module.webpackPolyfill) {
+			module.deprecate = function() {};
+			module.paths = [];
+			// module.parent = undefined by default
+			module.children = [];
+			module.webpackPolyfill = 1;
+		}
+		return module;
+	}
 
 
 /***/ },