Merge branch 'loop-bound-injection' of https://github.com/FlowiseAI/Flowise into loop-bound-injection

Author: christopherholland-workday

packages/server/src/services/evaluations/EvaluatorRunner.ts

@@ -10,6 +10,11 @@ interface EvaluatorReturnType {
     result: 'Pass' | 'Fail' | 'Error'
 }
 
+// Limit maximum array sizes to prevent DoS attacks
+const MAX_OUTPUTS = 10000
+const MAX_EVALUATORS = 1000
+const MAX_SPLIT_VALUES = 1000
+
 export const runAdditionalEvaluators = async (
     metricsArray: ICommonObject[],
     actualOutputArray: string[],