From 8ab17d80faa97e893119445a1c669ffad209d6f5 Mon Sep 17 00:00:00 2001 From: John-Michael Faircloth Date: Fri, 13 Jun 2025 09:17:23 -0500 Subject: [PATCH] Prevent possible DoS via polynomial regex (#583) --- dist/index.js | 2 +- src/secrets.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dist/index.js b/dist/index.js index e0d4f5f..99097d3 100644 --- a/dist/index.js +++ b/dist/index.js @@ -19271,7 +19271,7 @@ const selectAndAppendResults = async ( secretRequest, results ) => { - if (!selector.match(/.*[\.].*/)) { + if (!selector.includes(".")) { selector = '"' + selector + '"'; } selector = "data." + selector; diff --git a/src/secrets.js b/src/secrets.js index 02ed1fb..4b9a506 100644 --- a/src/secrets.js +++ b/src/secrets.js @@ -153,7 +153,7 @@ const selectAndAppendResults = async ( secretRequest, results ) => { - if (!selector.match(/.*[\.].*/)) { + if (!selector.includes(".")) { selector = '"' + selector + '"'; } selector = "data." + selector;