JS-185 Deeply nested ASTs should be de-serialized correctly

sonar-plugin/bridge/src/main/java/org/sonar/plugins/javascript/bridge/FormDataUtils.java

@@ -19,6 +19,7 @@
  */
 package org.sonar.plugins.javascript.bridge;
 
+import com.google.protobuf.CodedInputStream;
 import com.google.protobuf.InvalidProtocolBufferException;
 import java.io.IOException;
 import java.net.http.HttpResponse;
@@ -85,7 +86,9 @@ public static BridgeServer.BridgeResponse parseFormData(HttpResponse<byte[]> res
  @CheckForNull
  private static Node parseProtobuf(byte[] ast) throws IOException {
  try {
- return Node.parseFrom(ast);
+ CodedInputStream input = CodedInputStream.newInstance(ast, 0, ast.length);
+ input.setRecursionLimit(1000);
+ return Node.parseFrom(input);
  } catch (InvalidProtocolBufferException e) {
  // Failing to parse the protobuf message should not prevent the analysis from continuing.
  // This also happen in the case of large recursion. See https://sonarsource.atlassian.net/browse/JS-185.