actions/vault-action
5
0
Fork 0
mirror of https://github.com/hashicorp/vault-action.git synced 2025-11-07 07:06:56 +00:00
Code Activity Actions

Prevent possible DoS via polynomial regex

Browse source
This commit is contained in:
JM Faircloth 2025-06-12 17:02:20 -05:00
parent b022ecdb0c
commit 527015bbf2
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
dist/index.js vendored
View file

@ -19271,7 +19271,7 @@ const selectAndAppendResults = async (
secretRequest, secretRequest,
results results
) => { ) => {
if (!selector.match(/.*[\.].*/)) { if (!selector.includes(".")) {
selector = '"' + selector + '"'; selector = '"' + selector + '"';
} }
selector = "data." + selector; selector = "data." + selector;

2
src/secrets.js
View file

@ -153,7 +153,7 @@ const selectAndAppendResults = async (
secretRequest, secretRequest,
results results
) => { ) => {
if (!selector.match(/.*[\.].*/)) { if (!selector.includes(".")) {
selector = '"' + selector + '"'; selector = '"' + selector + '"';
} }
selector = "data." + selector; selector = "data." + selector;