From 444fe1ffcf6d877ed078c499fa1130c454907dcc Mon Sep 17 00:00:00 2001 From: Jeran Urban Date: Mon, 14 Nov 2022 10:11:36 -0600 Subject: [PATCH] Updated replace method for Uncontrolled Resource Consumption CVE-2022-37603 --- lib/interpolateName.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/interpolateName.js b/lib/interpolateName.js index 6a13a36..d8ade68 100644 --- a/lib/interpolateName.js +++ b/lib/interpolateName.js @@ -80,7 +80,7 @@ function interpolateName(loaderContext, name, options) { .replace(/\.\.(\/)?/g, '_$1'); directory = directory.substr(0, directory.length - 1); } else { - directory = resourcePath.replace(/\\/g, '/').replace(/\.\.(\/)?/g, '_$1'); + directory = resourcePath.replaceAll(/\\/g, '/').replaceAll(/\.\.(\/)?/g, '_$1'); } if (directory.length === 1) {