mirror of
https://github.com/hashicorp/vault-action.git
synced 2026-10-09 06:32:06 +00:00
Prevent possible DoS via polynomial regex (#583)
This commit is contained in:
Vendored
+1
-1
@@ -19271,7 +19271,7 @@ const selectAndAppendResults = async (
|
||||
secretRequest,
|
||||
results
|
||||
) => {
|
||||
if (!selector.match(/.*[\.].*/)) {
|
||||
if (!selector.includes(".")) {
|
||||
selector = '"' + selector + '"';
|
||||
}
|
||||
selector = "data." + selector;
|
||||
|
||||
+1
-1
@@ -153,7 +153,7 @@ const selectAndAppendResults = async (
|
||||
secretRequest,
|
||||
results
|
||||
) => {
|
||||
if (!selector.match(/.*[\.].*/)) {
|
||||
if (!selector.includes(".")) {
|
||||
selector = '"' + selector + '"';
|
||||
}
|
||||
selector = "data." + selector;
|
||||
|
||||
Reference in New Issue
Block a user