From 9f388b3b25836d9c27a7afb84eea7fa8ead47841 Mon Sep 17 00:00:00 2001 From: Yeting Li Date: Wed, 10 Feb 2021 18:27:03 +0800 Subject: [PATCH] fix the ReDoS-vulnerable regexp fix the ReDoS-vulnerable regexp addimage.js https://github.com/MrRio/jsPDF/blob/master/src/modules/addimage.js#L633 --- src/modules/addimage.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/modules/addimage.js b/src/modules/addimage.js index 5d206606f..d0295d0ca 100644 --- a/src/modules/addimage.js +++ b/src/modules/addimage.js @@ -630,7 +630,7 @@ import { atob, btoa } from "../libs/AtobBtoa.js"; var result = null; if (dataUrlParts.length === 2) { - var extractedInfo = /^data:(\w*\/\w*);*(charset=[\w=-]*)*;*$/.exec( + var extractedInfo = /^data:(\w*\/\w*);*(charset=(?!charset=)[\w=-]*)*;*$/.exec( dataUrlParts[0] ); if (Array.isArray(extractedInfo)) {