fix: Potential ReDoS Vulnerability or Inefficient Regular Expression in Project: Need for Assessment and Mitigation

[mmmsssttt404]

I am writing to report a potential Regular Expression Denial of Service (ReDoS) vulnerability or Inefficient Regular Expression in the project. When using specially crafted input strings in the context, it may lead to extremely high CPU usage, application freezing, or denial of service attacks.

toolkit/packages/glob/src/internal-pattern.ts

Line 191 in 36db4d6

.replace(/(\[)(?=[^/]+\])/g, '[[]') // escape '[' when ']' follows within the path segment

change to:
https://github.com/mmmsssttt404/toolkit/blob/f1d6d994406ccf553f554631c8aeff565b051950/packages/glob/src/internal-pattern.ts#L191

Describe the steps to verify that the changes are working as expected.

1.git clone https://github.com/mmmsssttt404/toolkit.git
2.cd toolkit
3.npm install
4.npm run build
5.npx tsc
6.npm test -- packages/glob/tests/internal-pattern.test.ts

before change:

after change: