拒绝服务漏洞: 可以利用运行长度编码来锁定 JS 线程

Checklist

• Are you reporting a bug? Use GitHub issues for bug reports and feature requests. For general questions, please use https://discuss.yjs.dev/
• Try to report your issue in the correct repository. Yjs consists of many modules. When in doubt, report it to https://GitHub.com/yjs/yjs/issues/

Describe the bug

It's possible to craft an invalid Uint8Array that will exploit run-length encoding to make Yjs' internals loop forever or eat up all your RAM when decoding an update.