Revert "Backport fix for GHSA-7h2j-956f-4vf2 to v1 (#101)" (#102)

This reverts commit 0d7652e.

Author: juliangruber

index.js

@@ -8,9 +8,6 @@ var escOpen = '\0OPEN'+Math.random()+'\0';
 var escClose = '\0CLOSE'+Math.random()+'\0';
 var escComma = '\0COMMA'+Math.random()+'\0';
 var escPeriod = '\0PERIOD'+Math.random()+'\0';
-var EXPANSION_MAX = 100000;
-
-module.exports.EXPANSION_MAX = EXPANSION_MAX;
 
 function numeric(str) {
   return parseInt(str, 10) == str
@@ -65,13 +62,10 @@ function parseCommaParts(str) {
   return parts;
 }
 
-function expandTop(str, options) {
+function expandTop(str) {
   if (!str)
     return [];
 
-  options = options || {};
-  var max = options.max == null ? EXPANSION_MAX : options.max;
-
   // I don't know why Bash 4.3 does this, but it does.
   // Anything starting with {} will have the first two bytes preserved
   // but *only* at the top level, so {},a}b will not expand to anything,
@@ -82,7 +76,7 @@ function expandTop(str, options) {
     str = '\\{\\}' + str.substr(2);
   }
 
-  return expand(escapeBraces(str), max, true).map(unescapeBraces);
+  return expand(escapeBraces(str), true).map(unescapeBraces);
 }
 
 function identity(e) {
@@ -103,7 +97,7 @@ function gte(i, y) {
   return i >= y;
 }
 
-function expand(str, max, isTop) {
+function expand(str, isTop) {
   var expansions = [];
 
   var m = balanced('{', '}', str);
@@ -117,7 +111,7 @@ function expand(str, max, isTop) {
     // {a},b}
     if (m.post.match(/,(?!,).*\}/)) {
       str = m.pre + '{' + m.body + escClose + m.post;
-      return expand(str, max, true);
+      return expand(str);
     }
     return [str];
   }
@@ -129,10 +123,10 @@ function expand(str, max, isTop) {
     n = parseCommaParts(m.body);
     if (n.length === 1) {
       // x{{a,b}}y ==> x{a}y x{b}y
-      n = expand(n[0], max, false).map(embrace);
+      n = expand(n[0], false).map(embrace);
       if (n.length === 1) {
         var post = m.post.length
-          ? expand(m.post, max, false)
+          ? expand(m.post, false)
           : [''];
         return post.map(function(p) {
           return m.pre + n[0] + p;
@@ -147,7 +141,7 @@ function expand(str, max, isTop) {
   // no need to expand pre, since it is guaranteed to be free of brace-sets
   var pre = m.pre;
   var post = m.post.length
-    ? expand(m.post, max, false)
+    ? expand(m.post, false)
     : [''];
 
   var N;
@@ -191,11 +185,11 @@ function expand(str, max, isTop) {
       N.push(c);
     }
   } else {
-    N = concatMap(n, function(el) { return expand(el, max, false) });
+    N = concatMap(n, function(el) { return expand(el, false) });
   }
 
   for (var j = 0; j < N.length; j++) {
-    for (var k = 0; k < post.length && expansions.length < max; k++) {
+    for (var k = 0; k < post.length; k++) {
       var expansion = pre + N[j] + post[k];
       if (!isTop || isSequence || expansion)
         expansions.push(expansion);

test/sequence.js

@@ -48,25 +48,3 @@ test('alphabetic sequences with step count', function(t) {
   t.end();
 });
 
-test('sequence dos', function(t) {
-  var str = '{1..10}'.repeat(10);
-  var expanded = expand(str);
-  var expanded10 = expand(str, { max: 10 });
-
-  t.equal(expanded.length, 100000, 'expansion is limited');
-  t.deepEqual(expanded10, [
-    '1111111111',
-    '1111111112',
-    '1111111113',
-    '1111111114',
-    '1111111115',
-    '1111111116',
-    '1111111117',
-    '1111111118',
-    '1111111119',
-    '11111111110'
-  ], 'custom max truncates expansion');
-  t.equal(expanded10.length, 10, 'custom max is respected');
-  t.end();
-});
-