From 527015bbf2d1acfe93989b1ff6d222664d588cf4 Mon Sep 17 00:00:00 2001 From: JM Faircloth Date: Thu, 12 Jun 2025 17:02:20 -0500 Subject: [PATCH] Prevent possible DoS via polynomial regex --- dist/index.js | 2 +- src/secrets.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dist/index.js b/dist/index.js index e0d4f5f..99097d3 100644 --- a/dist/index.js +++ b/dist/index.js @@ -19271,7 +19271,7 @@ const selectAndAppendResults = async ( secretRequest, results ) => { - if (!selector.match(/.*[\.].*/)) { + if (!selector.includes(".")) { selector = '"' + selector + '"'; } selector = "data." + selector; diff --git a/src/secrets.js b/src/secrets.js index 02ed1fb..4b9a506 100644 --- a/src/secrets.js +++ b/src/secrets.js @@ -153,7 +153,7 @@ const selectAndAppendResults = async ( secretRequest, results ) => { - if (!selector.match(/.*[\.].*/)) { + if (!selector.includes(".")) { selector = '"' + selector + '"'; } selector = "data." + selector;