search

X-neuron / antdFront

Antdfront is a set of multi tab experimental react microfrontend template
MIT License
202 stars 49 forks source link

Security fix for ReDoS #24

Closed ready-research closed 2 years ago

ready-research commented 2 years ago

Fixed Regular Expression Denial of Service vulnerability in URL validation.

Reported in huntr https://www.huntr.dev/bounties/bcd95e24-f967-4410-805a-d9f3b99642a0/ Please validate this huntr report using Mark as valid. Thanks.

X-neuron commented 2 years ago

thanks so much ,it's really so fast when testing url in some serious case

cost 0-4 ms vs old code will cost 1450ms -7500ms ~