mirror of
https://github.com/hashicorp/vault-action.git
synced 2026-07-25 16:03:15 +03:00
Prevent possible DoS via polynomial regex (#583)
This commit is contained in:
committed by
GitHub
parent
b022ecdb0c
commit
8ab17d80fa
Vendored
+1
-1
@@ -19271,7 +19271,7 @@ const selectAndAppendResults = async (
|
||||
secretRequest,
|
||||
results
|
||||
) => {
|
||||
if (!selector.match(/.*[\.].*/)) {
|
||||
if (!selector.includes(".")) {
|
||||
selector = '"' + selector + '"';
|
||||
}
|
||||
selector = "data." + selector;
|
||||
|
||||
+1
-1
@@ -153,7 +153,7 @@ const selectAndAppendResults = async (
|
||||
secretRequest,
|
||||
results
|
||||
) => {
|
||||
if (!selector.match(/.*[\.].*/)) {
|
||||
if (!selector.includes(".")) {
|
||||
selector = '"' + selector + '"';
|
||||
}
|
||||
selector = "data." + selector;
|
||||
|
||||
Reference in New Issue
Block a user