Implement recursionDepth limit (10) in filters and validators

Author: jissereitsma

Exception/RecursionException.php

@@ -0,0 +1,9 @@
+<?php declare(strict_types=1);
+
+namespace Loki\Components\Exception;
+
+use RuntimeException;
+
+class RecursionException extends RuntimeException
+{
+}

Filter/Filter.php

@@ -3,6 +3,7 @@
 namespace Loki\Components\Filter;
 
 use Loki\Components\Component\ComponentInterface;
+use Loki\Components\Exception\RecursionException;
 
 class Filter
 {
@@ -16,8 +17,13 @@ public function __construct(
     public function filter(
         ComponentInterface $component,
         mixed $data = null,
-        mixed $propertyName = null
+        mixed $propertyName = null,
+        int $depth = 0
     ): mixed {
+        if ($depth >= $this->recursionDepth) {
+            throw new RecursionException('Too many array levels');
+        }
+
         $filters = $this->filterRegistry->getApplicableFilters(
             $component->getFilters()
         );
@@ -32,14 +38,22 @@ public function filter(
 
         if (is_array($data)) {
             foreach ($data as $propertyName => $value) {
-                $data[$propertyName] = $this->filter($component, $value, $propertyName);
+                $data[$propertyName] = $this->filter(
+                    $component,
+                    $value,
+                    $propertyName,
+                    $depth + 1
+                );
             }
 
             return $data;
         }
 
         foreach ($filters as $filter) {
-            $data = $filter->filter($data, $filterScope);
+            $data = $filter->filter(
+                $data,
+                $filterScope
+            );
         }
 
         return $data;

Validator/Validator.php

@@ -2,6 +2,7 @@
 
 namespace Loki\Components\Validator;
 
+use Loki\Components\Exception\RecursionException;
 use Magento\Framework\Phrase;
 use Loki\Components\Component\ComponentInterface;
 use Loki\Components\Messages\LocalMessage;
@@ -17,11 +18,16 @@ public function __construct(
     public function validate(
         ComponentInterface $component,
         mixed $data = null,
-        string $scope = ''
+        string $scope = '',
+        int $depth = 0
     ): bool {
+        if ($depth >= $this->recursionDepth) {
+            throw new RecursionException('Too many array levels');
+        }
+
         if (is_array($data)) {
             foreach ($data as $value) {
-                if (false === $this->validate($component, $value)) {
+                if (false === $this->validate($component, $value, '', $depth + 1)) {
                     return false;
                 }
             }