[Security] Fix ReDoS (#333)

Fix potential ReDoS
terkelg · Oct 7, 2021 · bf39500 · bf39500
1 parent 22fe104
commit bf39500
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/util/strip.js b/lib/util/strip.js
@@ -2,7 +2,7 @@
 
 module.exports = str => {
   const pattern = [
-    '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:[a-zA-Z\\d]*(?:;[a-zA-Z\\d]*)*)?\\u0007)',
+    '[\\u001B\\u009B][[\\]()#;?]*(?:(?:(?:(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]+)*|[a-zA-Z\\d]+(?:;[-a-zA-Z\\d\\/#&.:=?%@~_]*)*)?\\u0007)',
     '(?:(?:\\d{1,4}(?:;\\d{0,4})*)?[\\dA-PRZcf-ntqry=><~]))'
   ].join('|');