VFX-D-1105¶

Title¶

SuiteAliasLimitExceeded

Explanation¶

The suite's YAML declares more than 10 anchors or more than 10 aliases — the "billion laughs" defence. This DSL does not use YAML anchors/aliases at all, so a small, fixed cap is enough to catch a malicious or accidental exponential-expansion payload before it is ever expanded in memory.

Common causes¶

• A suite copy-pasted from elsewhere that still contains YAML anchor/alias shorthand (&anchor / *alias) intended for reuse.
• Auto-generated YAML that used anchors to deduplicate repeated fixture blocks.
• A malicious or corrupted suite file deliberately crafted to trigger exponential expansion.

Fixes¶

• Remove YAML anchors/aliases entirely — this DSL does not use them; write out any repeated content explicitly.
• If reuse was the goal, factor shared content into its own step referenced by id, rather than a YAML alias.
• Treat an unexpected alias-heavy suite you did not author as suspicious, and inspect it before using it.