Fix the reported security bug.

manugarg / pacparser

A library to parse proxy auto-config (PAC) files

http://pacparser.manugarg.com

GNU Lesser General Public License v3.0

506 stars 116 forks source link

Closed manugarg closed 1 year ago

manugarg commented 1 year ago

Fix:

Use the JS_FunctionCall() API to call the FindProxyForURL() function instead of JS_EvaluateScript() API.
This also does away with the need to str_replace function. Making code simpler.
I've verified the fix with the test cases provided in the security bug.

sonarcloud[bot] commented 1 year ago

Kudos, SonarCloud Quality Gate passed!