actions/vault-action
5
0
Fork 0
mirror of https://github.com/hashicorp/vault-action.git synced 2025-11-06 23:06:54 +00:00
Code Activity Actions

Prevent possible DoS via polynomial regex (#583)

Browse source
This commit is contained in:
John-Michael Faircloth 2025-06-13 09:17:23 -05:00 committed by GitHub
parent b022ecdb0c
commit 8ab17d80fa
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
dist/index.js vendored
View file

@ -19271,7 +19271,7 @@ const selectAndAppendResults = async (
secretRequest, secretRequest,
results results
) => { ) => {
if (!selector.match(/.*[\.].*/)) { if (!selector.includes(".")) {
selector = '"' + selector + '"'; selector = '"' + selector + '"';
} }
selector = "data." + selector; selector = "data." + selector;

2
src/secrets.js
View file

@ -153,7 +153,7 @@ const selectAndAppendResults = async (
secretRequest, secretRequest,
results results
) => { ) => {
if (!selector.match(/.*[\.].*/)) { if (!selector.includes(".")) {
selector = '"' + selector + '"'; selector = '"' + selector + '"';
} }
selector = "data." + selector; selector = "data." + selector;