Hey there! I saw a minor security vulnerability with a regex in this library. In trying to match a hexidecimal character, the regex does /A-f/ - note that A-f is a much larger range than A-F and includes some fun character (see ('A'...'f').to_a). The simpliest fix is changing the regex to be
name =~ /\Au([0-9A-f]{4,6})\Z/
but then I discovered that Ruby regex has it's own shorthand for matching hex characters\h, which seems even better. are you open to fixing this regex?
Hey there! I saw a minor security vulnerability with a regex in this library. In trying to match a hexidecimal character, the regex does
/A-f/
- note that A-f is a much larger range than A-F and includes some fun character (see('A'...'f').to_a
). The simpliest fix is changing the regex to bebut then I discovered that Ruby regex has it's own shorthand for matching hex characters
\h
, which seems even better. are you open to fixing this regex?