search

arthur-e / Wicket

A modest library for moving between Well-Known Text (WKT) and various framework geometries
https://arthur-e.github.io/Wicket/
Other
586 stars 226 forks source link

security: fix catastrophic backtracking #122

Closed davisjam closed 6 years ago

davisjam commented 6 years ago

As disclosed by email: A regex used for input processing was vulnerable to catastrophic backtracking.

I replaced the regex with an equivalent, safe, function.

If merged, this is a good time to release a new version to npm.

davisjam commented 6 years ago

Travis failure: This is the same failure I see when I run 'npm test' on a clean clone. Should not disqualify this PR.

arthur-e commented 6 years ago

Great, thanks!