Crass: A large number of adjacent CSS comments can trigger a SystemStackError

Impact When the :preservecomments option is not enabled which is the default behavior, Crass discards CSS comments by recursively consuming the next token. An attacker who provides a stylesheet containing a very large number of adjacent comments can cause excessive recursion and trigger a...