Merge pull request #3004 in SNORT/snort3 from ~DKYRYLOV/snort3:doc_js_norm_template_l...

Squashed commit of the following:

commit d27729bee803b4f869f80ba0ba725da06fe6282d
Author: dkyrylov <dkyrylov@cisco.com>
Date:   Thu Jul 29 11:11:52 2021 +0300

    doc: Add js_norm_max_template_nesting description

diff --git a/doc/user/http_inspect.txt b/doc/user/http_inspect.txt
index 4ba703dbffd88654b0e10edaebd26d5dcd7abc81..fa316c2a04b15ff6bebdacf9f653b3ad9f2fd346 100755 (executable)
--- a/doc/user/http_inspect.txt
+++ b/doc/user/http_inspect.txt
@@ -181,6 +181,18 @@ a0 to z9999. Thus, the number of unique identifiers cannot be greater than
 set to a non-zero value, enabling the enhanced normalizer.
 This is currently experimental and still under development.
 
+===== js_norm_max_tmpl_nest
+
+js_norm_max_tmpl_nest = N {0 : 255} (default 32) is an option of the enhanced
+JavaScript normalizer that determines the deepest level of nested template literals
+to be processed. Introduced in ES6, template literals provide syntax to define
+a literal multiline string, which can have arbitrary JavaScript substitutions,
+that will be evaluated and inserted into the string. Such substitutions can be
+nested, and require keeping track of every layer for proper normalization. This option
+is present to limit the amount of memory dedicated to this tracking. This option
+is used only when js_normalization_depth is not 0. This feature
+is currently experimental and still under development.
+
 ===== xff_headers
 
 This configuration supports defining custom x-forwarded-for type headers. In a