Merge pull request #2 from MrRio/master

fix ReDoS-vulnerable regexp in addImage (parallax#3091)
sthagen · Feb 13, 2021 · 0365128 · 0365128
2 parents faeb8d3 + d8bb3b3
commit 0365128
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/modules/addimage.js b/src/modules/addimage.js
@@ -630,7 +630,7 @@ import { atob, btoa } from "../libs/AtobBtoa.js";
     var result = null;
 
     if (dataUrlParts.length === 2) {
-      var extractedInfo = /^data:(\w*\/\w*);*(charset=[\w=-]*)*;*$/.exec(
+      var extractedInfo = /^data:(\w*\/\w*);*(charset=(?!charset=)[\w=-]*)*;*$/.exec(
         dataUrlParts[0]
       );
       if (Array.isArray(extractedInfo)) {