search

whitequark / rack-utf8_sanitizer

Rack::UTF8Sanitizer is a Rack middleware which cleans up invalid UTF8 characters in request URI and headers.
MIT License
315 stars 53 forks source link

Avoid 2nd degree polynomial regexp for sanitizing content type #82

Closed casperisfine closed 9 months ago

casperisfine commented 9 months ago

This can lead to ReDos on Ruby 3.1 and older.

whitequark commented 9 months ago

Thanks!