mirror of
https://github.com/hashicorp/vault-action.git
synced 2026-07-26 00:13:16 +03:00
Prevent possible DoS via polynomial regex (#583)
This commit is contained in:
committed by
GitHub
parent
b022ecdb0c
commit
8ab17d80fa
Vendored
+1
-1
@@ -19271,7 +19271,7 @@ const selectAndAppendResults = async (
|
|||||||
secretRequest,
|
secretRequest,
|
||||||
results
|
results
|
||||||
) => {
|
) => {
|
||||||
if (!selector.match(/.*[\.].*/)) {
|
if (!selector.includes(".")) {
|
||||||
selector = '"' + selector + '"';
|
selector = '"' + selector + '"';
|
||||||
}
|
}
|
||||||
selector = "data." + selector;
|
selector = "data." + selector;
|
||||||
|
|||||||
+1
-1
@@ -153,7 +153,7 @@ const selectAndAppendResults = async (
|
|||||||
secretRequest,
|
secretRequest,
|
||||||
results
|
results
|
||||||
) => {
|
) => {
|
||||||
if (!selector.match(/.*[\.].*/)) {
|
if (!selector.includes(".")) {
|
||||||
selector = '"' + selector + '"';
|
selector = '"' + selector + '"';
|
||||||
}
|
}
|
||||||
selector = "data." + selector;
|
selector = "data." + selector;
|
||||||
|
|||||||
Reference in New Issue
Block a user