Fix code scanning alert - Polynomial regular expression used on uncontrolled data

Question

char0n opened this issue 8 months ago · 4 comments

Tracking issue for:

Answer 1 · 2024-05-08T14:56:08.000Z

Fully safe regexp: /\{([^{}]+)}|([^{}]+)/g

Answer 2 · 2024-05-08T15:03:29.000Z

  while ((text = re.exec(str))) {
    if (text[1]) results.push(text[1]);
  }
  return results;

Answer 3 · 2024-05-08T18:44:31.000Z

The issue was mitigated in #3502

Answer 4 · 2024-05-08T18:44:42.000Z

The issue was fully remediated in #3507