johnxnguyen / Down

Blazing fast Markdown / CommonMark rendering in Swift, built upon cmark.
Other
2.24k stars 319 forks source link

SAST flagged: Unsafe Regular Expression #288

Open ps-vm opened 2 years ago

ps-vm commented 2 years ago

Please help prevent duplicate issues before submitting a new one:

Report

Our SAST report picked up a high vulnerability within this library

Configured SAST to run within GitLab pipelines for our iOS project.

What did you expect to happen?

No high vulnerabilities

What happened instead?

Three high vulnerabilities related to this library has been flagged, this particular one is in the highlight.js file. We're on the latest version of this library and need to be able to reduce all critical and high vulnerabilities in order to ensure we're releasing secure products.