TryGhost / Ghost

Independent technology for modern publishing, memberships, subscriptions and newsletters.
https://ghost.org
MIT License
46.27k stars 10.11k forks source link

Added custom redirects ReDoS validation #20515

Closed mike182uk closed 1 week ago

mike182uk commented 1 week ago

refs ENG-709

Added validation to prevent RegEx's susceptible to ReDoS from being used with custom redirects. Also moved error details out of context and into errorDetails to be consistent with error logging elsewhere as well as fix issue in admin-x where blank screen would be shown when an error occurred during redirects upload (due to logic not accounting for context being an object)