diff --git a/supabase/functions/import-source/html-text.ts b/supabase/functions/import-source/html-text.ts
new file mode 100644
index 000000000..53c596d91
--- /dev/null
+++ b/supabase/functions/import-source/html-text.ts
@@ -0,0 +1,230 @@
+// HTML cleanup for URL import. Tag removal is a single forward scan: the old
+// regular expressions retried unclosed `<meta` and `<nav` until the import
+// timed out, and an out-of-range numeric entity threw before any text was saved.
+// Every search below remembers where it last found its needle and only searches
+// again once the scan has passed that point, so hostile pages (thousands of
+// unclosed tags, a stray `<` with no `>`) stay linear in the page size.
+
+/** indexOf for a forward scan: repeated calls with growing `from` cost O(n) in total. */
+function forwardFinder(haystack: string, needle: string): (from: number) => number {
+  let found = -2; // -2: not searched yet; -1: absent from `searchedFrom` on
+  let searchedFrom = 0;
+  return (from: number) => {
+    if (found === -1 && from >= searchedFrom) return -1;
+    if (found >= from && from >= searchedFrom) return found;
+    searchedFrom = from;
+    found = haystack.indexOf(needle, from);
+    return found;
+  };
+}
+
+const STRIP_TAGS = new Set([
+  "script", "style", "template", "noscript", "nav", "footer", "header", "aside", "form", "svg", "iframe", "button",
+]);
+const ROLE_STRIP = new Set(["banner", "navigation", "complementary", "search", "contentinfo"]);
+const CLASS_HINT = /(?:^|[\s_-])(?:cookie|consent|banner|navbar|navigation|nav|menu|sidebar|header|footer|subscribe|newsletter|social|share|paywall)(?:$|[\s_-])/i;
+const CONTENT_HINT = /(?:^|[\s_-])(?:article|content|story|post|entry|main|body|reader)(?:$|[\s_-])/i;
+const CONTENT_TAGS = new Set(["article", "main", "section", "div"]);
+
+export function decodeEntities(text: string): string {
+  return text
+    .replace(/&nbsp;/gi, " ")
+    .replace(/&amp;/gi, "&")
+    .replace(/&quot;/gi, "\"")
+    .replace(/&apos;/gi, "'")
+    .replace(/&lt;/gi, "<")
+    .replace(/&gt;/gi, ">")
+    .replace(/&#x([0-9a-f]+);/gi, (_, hex: string) => fromCodePoint(hex, 16))
+    .replace(/&#(\d+);/g, (_, dec: string) => fromCodePoint(dec, 10));
+}
+
+function fromCodePoint(raw: string, radix: number): string {
+  const code = parseInt(raw, radix);
+  // Surrogates and values past Unicode's last code point throw from fromCodePoint.
+  if (!Number.isInteger(code) || code < 0 || code > 0x10FFFF || (code >= 0xD800 && code <= 0xDFFF)) return "";
+  return String.fromCodePoint(code);
+}
+
+function readAttr(tag: string, attr: string): string | undefined {
+  const match = tag.match(new RegExp(`\\b${attr}\\s*=\\s*(?:"([^"]*)"|'([^']*)')`, "i"));
+  return match?.[1] ?? match?.[2];
+}
+
+function parseOpenTag(tag: string): { name: string; closing: boolean; selfClosing: boolean } | null {
+  const match = /^<\s*(\/)?\s*([a-zA-Z][\w:-]*)/.exec(tag);
+  if (!match) return null;
+  return {
+    name: match[2].toLowerCase(),
+    closing: Boolean(match[1]),
+    selfClosing: /\/\s*>$/.test(tag),
+  };
+}
+
+export function getMeta(html: string, names: string[]): string | undefined {
+  const wanted = new Set(names.map((name) => name.toLowerCase()));
+  const lower = html.toLowerCase();
+  const nextMeta = forwardFinder(lower, "<meta");
+  const nextGt = forwardFinder(html, ">");
+  let i = 0;
+  while (i < html.length) {
+    const start = nextMeta(i);
+    if (start === -1) return undefined;
+    const next = lower[start + 5];
+    if (next && /[a-z0-9]/.test(next)) {
+      i = start + 5;
+      continue;
+    }
+    const end = nextGt(start);
+    // No `>` left means no complete tag left.
+    if (end === -1) return undefined;
+    // An overlong tag is skipped in one step. Searching it with a regex retried the whole page.
+    if (end - start > 4000) {
+      i = start + 5;
+      continue;
+    }
+    const tag = html.slice(start, end + 1);
+    const name = (readAttr(tag, "property") || readAttr(tag, "name") || "").toLowerCase();
+    const content = readAttr(tag, "content");
+    if (name && content !== undefined && wanted.has(name)) return decodeEntities(content.trim());
+    i = end + 1;
+  }
+  return undefined;
+}
+
+export function getTitle(html: string, fallback: string): string {
+  const meta = getMeta(html, ["og:title", "twitter:title"]);
+  if (meta) return meta;
+  const lower = html.toLowerCase();
+  const start = lower.indexOf("<title");
+  if (start === -1) return fallback;
+  const openEnd = html.indexOf(">", start);
+  const close = openEnd === -1 ? -1 : lower.indexOf("</title>", openEnd);
+  if (openEnd === -1 || close === -1 || close - openEnd > 2000) return fallback;
+  const text = decodeEntities(html.slice(openEnd + 1, close).replace(/\s+/g, " ").trim());
+  return text || fallback;
+}
+
+function shouldStrip(name: string, tag: string): boolean {
+  if (STRIP_TAGS.has(name)) return true;
+  if (name !== "div" && name !== "section") return false;
+  const role = readAttr(tag, "role")?.toLowerCase();
+  if (role && ROLE_STRIP.has(role)) return true;
+  const idClass = `${readAttr(tag, "id") || ""} ${readAttr(tag, "class") || ""}`;
+  return CLASS_HINT.test(idClass);
+}
+
+function isContentBlock(name: string, tag: string): boolean {
+  if (!CONTENT_TAGS.has(name)) return false;
+  if (name === "article" || name === "main") return true;
+  const idClass = `${readAttr(tag, "id") || ""} ${readAttr(tag, "class") || ""}`;
+  return CONTENT_HINT.test(idClass);
+}
+
+/** Index just after the matching close tag, or -1 when this element is never closed. */
+function matchingClose(html: string, lower: string, tag: string, from: number, absentAfter: Map<string, number>): number {
+  const known = absentAfter.get(tag);
+  if (known !== undefined && from >= known) return -1;
+  const openNeedle = `<${tag}`;
+  const closeNeedle = `</${tag}`;
+  // Each needle is searched once per occurrence, not once per nesting level:
+  // re-running indexOf for the far close tag at every level was quadratic.
+  const findOpen = forwardFinder(lower, openNeedle);
+  const findClose = forwardFinder(lower, closeNeedle);
+  let depth = 1;
+  let i = from;
+  while (depth > 0) {
+    const nextOpen = findOpen(i);
+    const nextClose = findClose(i);
+    if (nextClose === -1) {
+      absentAfter.set(tag, from);
+      return -1;
+    }
+    const openIsTag = nextOpen !== -1 && !/[a-z0-9]/i.test(lower[nextOpen + openNeedle.length] || "");
+    if (openIsTag && nextOpen < nextClose) {
+      depth += 1;
+      i = nextOpen + openNeedle.length;
+      continue;
+    }
+    depth -= 1;
+    i = nextClose + closeNeedle.length;
+  }
+  const end = html.indexOf(">", i - closeNeedle.length);
+  return end === -1 ? html.length : end + 1;
+}
+
+export function stripHtml(html: string): string {
+  const lower = html.toLowerCase();
+  const absentAfter = new Map<string, number>();
+  const candidates: string[] = [];
+  const nextGt = forwardFinder(html, ">");
+  let cleaned = "";
+  let i = 0;
+  while (i < html.length) {
+    const start = html.indexOf("<", i);
+    if (start === -1) {
+      cleaned += html.slice(i);
+      break;
+    }
+    cleaned += html.slice(i, start);
+    if (lower.startsWith("<!--", start)) {
+      const end = html.indexOf("-->", start + 4);
+      cleaned += " ";
+      i = end === -1 ? html.length : end + 3;
+      continue;
+    }
+    const end = nextGt(start + 1);
+    if (end === -1) {
+      // No `>` left, so nothing after this point can be a tag.
+      cleaned += html.slice(start);
+      break;
+    }
+    if (end - start > 8000) {
+      cleaned += "<";
+      i = start + 1;
+      continue;
+    }
+    const tag = html.slice(start, end + 1);
+    const parsed = parseOpenTag(tag);
+    if (!parsed || parsed.closing || parsed.selfClosing) {
+      cleaned += tag;
+      i = end + 1;
+      continue;
+    }
+    if (shouldStrip(parsed.name, tag)) {
+      const close = matchingClose(html, lower, parsed.name, end + 1, absentAfter);
+      cleaned += " ";
+      i = close === -1 ? end + 1 : close;
+      continue;
+    }
+    if (isContentBlock(parsed.name, tag) && candidates.length < 8) {
+      const close = matchingClose(html, lower, parsed.name, end + 1, absentAfter);
+      if (close !== -1) candidates.push(html.slice(end + 1, close));
+    }
+    cleaned += tag;
+    i = end + 1;
+  }
+
+  const textCandidates = [...candidates, cleaned]
+    .map((candidate) => htmlToText(candidate))
+    .filter((text) => text.split(/\s+/).filter(Boolean).length >= 20);
+  return textCandidates.sort((a, b) => scoreReadableText(b) - scoreReadableText(a))[0] || htmlToText(cleaned);
+}
+
+function htmlToText(html: string): string {
+  return decodeEntities(html
+    .replace(/<\/(p|div|section|article|main|h[1-6]|li|blockquote|tr)>/gi, "\n")
+    .replace(/<br\s*\/?>/gi, "\n")
+    // `[^<>]` keeps each attempt from rescanning to the end of a page full of stray `<`.
+    .replace(/<[^<>]+>/g, " ")
+    .replace(/[ \t]+/g, " ")
+    .replace(/\n{3,}/g, "\n\n")
+    .trim());
+}
+
+function scoreReadableText(text: string): number {
+  const words = text.split(/\s+/).filter(Boolean).length;
+  const paragraphs = text.split(/\n{2,}/).filter((part) => part.trim().split(/\s+/).length >= 12).length;
+  const punctuation = (text.match(/[.!?]/g) || []).length;
+  const navPenalty = (text.match(/\b(cookie|subscribe|sign in|advertisement|privacy policy|all rights reserved)\b/gi) || []).length * 30;
+  return words + paragraphs * 80 + punctuation * 4 - navPenalty;
+}
diff --git a/supabase/functions/import-source/html-text_test.ts b/supabase/functions/import-source/html-text_test.ts
new file mode 100644
index 000000000..e8d70b1b5
--- /dev/null
+++ b/supabase/functions/import-source/html-text_test.ts
@@ -0,0 +1,75 @@
+import { assertEquals } from "jsr:@std/assert@1.0.19";
+import { decodeEntities, getMeta, getTitle, stripHtml } from "./html-text.ts";
+
+Deno.test("out-of-range numeric entities do not crash the import", () => {
+  const html = `<article><p>${"word ".repeat(30)}&#99999999; &#x110000; &#xD800; &#38; more.</p></article>`;
+  const text = stripHtml(html);
+  assertEquals(text.includes("Invalid code point"), false);
+  assertEquals(text.includes("&"), true);
+  assertEquals(decodeEntities("&#99999999;"), "");
+  assertEquals(decodeEntities("&#38;"), "&");
+  assertEquals(decodeEntities("caf&#233;"), "café");
+});
+
+Deno.test("article text is kept and a closed nav is dropped", () => {
+  const words = "Public transport is cheaper than driving for most students in cities.";
+  const html = `<nav><a>Home</a><a>Sign in</a></nav><article><p>${words} ${words}</p></article>`;
+  const text = stripHtml(html);
+  assertEquals(text.includes("Public transport"), true);
+  assertEquals(text.includes("Home"), false);
+});
+
+Deno.test("meta titles are read without retrying an unclosed tag", () => {
+  const hostile = "<meta name='og:title' ".repeat(8000);
+  const started = Date.now();
+  assertEquals(getMeta(hostile, ["og:title"]), undefined);
+  assertEquals(getTitle(`${hostile}<title>Voting age</title>`, "fallback"), "Voting age");
+  const closed = `<meta property="og:title" content="Free buses &amp; trains">`;
+  assertEquals(getMeta(closed, ["og:title"]), "Free buses & trains");
+  if (Date.now() - started > 500) throw new Error("unclosed meta tags took too long");
+});
+
+Deno.test("a long run of unclosed nav tags stays fast", () => {
+  const html = "<nav class='menu'>".repeat(4000) + `<article><p>${"evidence ".repeat(40)}</p></article>`;
+  const started = Date.now();
+  const text = stripHtml(html);
+  if (Date.now() - started > 500) throw new Error("unclosed nav tags took too long");
+  assertEquals(text.includes("evidence"), true);
+});
+
+// Pages up to the 1 MB import limit. Each case was quadratic in an earlier
+// version and took from seconds to many minutes at this size; linear code
+// takes well under 200 ms. The budget is loose so a busy machine does not flake.
+const PAGE = 1_000_000;
+const BUDGET_MS = 1500;
+const hostilePages: Record<string, string> = {
+  "unclosed nav tags with one far close": "<nav>".repeat(PAGE / 5) + "</nav>",
+  "stray < with no >": "<".repeat(PAGE),
+  "unclosed meta tags with no >": "<meta ".repeat(PAGE / 6),
+  "text full of '< a'": "< a ".repeat(PAGE / 4),
+  "overlong tags": ("<" + "a".repeat(9000)).repeat(Math.ceil(PAGE / 9001)) + ">",
+};
+for (const [name, html] of Object.entries(hostilePages)) {
+  Deno.test(`a 1 MB page of ${name} is parsed in linear time`, () => {
+    const started = performance.now();
+    stripHtml(html);
+    getTitle(html, "fallback");
+    getMeta(html, ["author"]);
+    const elapsed = performance.now() - started;
+    if (elapsed > BUDGET_MS) throw new Error(`${name}: ${Math.round(elapsed)} ms`);
+  });
+}
+
+Deno.test("a nested nav is dropped whole and the article survives the speed-ups", () => {
+  const words = "Lowering the voting age raises turnout among first-time voters.";
+  const html = `<nav><ul><li><nav>Inner</nav></li></ul>Outer</nav><article><p>${words} ${words} ${words}</p></article>`;
+  const text = stripHtml(html);
+  assertEquals(text.includes("Inner"), false);
+  assertEquals(text.includes("Outer"), false);
+  assertEquals(text.includes("voting age"), true);
+});
+
+Deno.test("text after the last > is kept, with no tag parsing", () => {
+  const html = `<p>${"word ".repeat(25)}</p> 3 < 5 and more words here`;
+  assertEquals(stripHtml(html).includes("3 < 5 and more words here"), true);
+});
diff --git a/supabase/functions/import-source/index.ts b/supabase/functions/import-source/index.ts
index 7a7f7fca3..7a8c0d54a 100644
--- a/supabase/functions/import-source/index.ts
+++ b/supabase/functions/import-source/index.ts
@@ -1,6 +1,7 @@
 import { createClient, type User } from "https://esm.sh/@supabase/supabase-js@2.114.0";
 import { isPrivateIpv4, isPrivateIpv6, validatePublicHttpUrl, validateResolvedPublicHost } from "./url-validation.ts";
 import { readBoundedText } from "./resource-limits.ts";
+import { getMeta, getTitle, stripHtml } from "./html-text.ts";
 import { BodyTooLargeError, discardRequestBody, readBoundedBody, untilAborted } from "../_shared/bounded-body.ts";
 import { HttpError, jsonError, requireUser } from "../_shared/auth.ts";
 import { getCorsHeaders } from "../_shared/cors.ts";
@@ -102,85 +103,6 @@ async function fetchWithRedirects(initialUrl: URL, signal: AbortSignal) {
   throw new Error("Too many redirects.");
 }
 
-function decodeEntities(text: string) {
-  return text
-    .replace(/&nbsp;/gi, " ")
-    .replace(/&amp;/gi, "&")
-    .replace(/&quot;/gi, "\"")
-    .replace(/&apos;/gi, "'")
-    .replace(/&lt;/gi, "<")
-    .replace(/&gt;/gi, ">")
-    .replace(/&#x([0-9a-f]+);/gi, (_, hex) => {
-      const code = parseInt(hex, 16);
-      return Number.isFinite(code) ? String.fromCodePoint(code) : "";
-    })
-    .replace(/&#(\d+);/g, (_, dec) => {
-      const code = parseInt(dec, 10);
-      return Number.isFinite(code) ? String.fromCodePoint(code) : "";
-    });
-}
-
-function getMeta(html: string, names: string[]) {
-  for (const name of names) {
-    const pattern = new RegExp(`<meta\\s+[^>]*(?:name|property)=["']${name}["'][^>]*content=["']([^"']+)["'][^>]*>`, "i");
-    const reversePattern = new RegExp(`<meta\\s+[^>]*content=["']([^"']+)["'][^>]*(?:name|property)=["']${name}["'][^>]*>`, "i");
-    const match = html.match(pattern) || html.match(reversePattern);
-    if (match?.[1]) return decodeEntities(match[1].trim());
-  }
-  return undefined;
-}
-
-function getTitle(html: string, fallback: string) {
-  return getMeta(html, ["og:title", "twitter:title"]) ||
-    decodeEntities(html.match(/<title[^>]*>([\s\S]*?)<\/title>/i)?.[1]?.replace(/\s+/g, " ").trim() || "") ||
-    fallback;
-}
-
-function stripHtml(html: string) {
-  const cleaned = html
-    .replace(/<script[\s\S]*?<\/script>/gi, " ")
-    .replace(/<style[\s\S]*?<\/style>/gi, " ")
-    .replace(/<template[\s\S]*?<\/template>/gi, " ")
-    .replace(/<noscript[\s\S]*?<\/noscript>/gi, " ")
-    .replace(/<!--[\s\S]*?-->/g, " ")
-    .replace(/<(nav|footer|header|aside|form|svg|iframe|button)[\s\S]*?<\/\1>/gi, " ")
-    .replace(/<(div|section)[^>]*role=["'](banner|navigation|complementary|search|contentinfo)["'][\s\S]*?<\/\1>/gi, " ")
-    .replace(/<(div|section)[^>]*(?:id|class)=["'][^"']*(?:cookie|consent|banner|nav(?:bar|igation)?|menu|sidebar|header|footer|subscribe|newsletter|social|share|paywall)[^"']*["'][\s\S]*?<\/\1>/gi, " ");
-
-  const candidates: string[] = [];
-  const blockPattern = /<(article|main|section|div)[^>]*(?:id|class)=["'][^"']*(?:article|content|story|post|entry|main|body|reader)[^"']*["'][^>]*>([\s\S]*?)<\/\1>/gi;
-  for (const match of cleaned.matchAll(blockPattern)) {
-    if (match[2]) candidates.push(match[2]);
-  }
-  const semanticMatch = cleaned.match(/<(article|main)[^>]*>([\s\S]*?)<\/\1>/i);
-  if (semanticMatch?.[2]) candidates.push(semanticMatch[2]);
-  candidates.push(cleaned);
-
-  const textCandidates = candidates
-    .map((candidate) => htmlToText(candidate))
-    .filter((text) => text.split(/\s+/).filter(Boolean).length >= 20);
-
-  return textCandidates.sort((a, b) => scoreReadableText(b) - scoreReadableText(a))[0] || htmlToText(cleaned);
-}
-
-function htmlToText(html: string) {
-  return decodeEntities(html
-    .replace(/<\/(p|div|section|article|main|h[1-6]|li|blockquote|tr)>/gi, "\n")
-    .replace(/<br\s*\/?>/gi, "\n")
-    .replace(/<[^>]+>/g, " ")
-    .replace(/[ \t]+/g, " ")
-    .replace(/\n{3,}/g, "\n\n")
-    .trim());
-}
-
-function scoreReadableText(text: string) {
-  const words = text.split(/\s+/).filter(Boolean).length;
-  const paragraphs = text.split(/\n{2,}/).filter((part) => part.trim().split(/\s+/).length >= 12).length;
-  const punctuation = (text.match(/[.!?]/g) || []).length;
-  const navPenalty = (text.match(/\b(cookie|subscribe|sign in|advertisement|privacy policy|all rights reserved)\b/gi) || []).length * 30;
-  return words + paragraphs * 80 + punctuation * 4 - navPenalty;
-}
-
 const UI_PHRASE_PATTERNS = [
   /^skip to (?:main )?content\b/i,
   /^skip to navigation\b/i,
@@ -313,7 +235,6 @@ export async function handleRequest(req: Request): Promise<Response> {
     }
 
     const raw = await readBoundedText(response, deadline.signal);
-    clearTimeout(deadlineTimer);
     const isHtml = contentType.includes("html") || /<html|<article|<main|<p[\s>]/i.test(raw);
     const content = normalizeText(isHtml ? stripHtml(raw) : raw);