Fix ReDoS with autolink

Patterns like <<<<<<<<<<:/:/:/:/:/:/:/:/:/:/ currently exhibit O(n^3) complexity, allowing a 5KB document to take 7174ms to parse. With this change, it drops to O(n^2) and 73ms.
ariabuckles · Sep 26, 2019 · 015a719 · 015a719
1 parent 8a2b428
commit 015a719
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/simple-markdown.js b/simple-markdown.js
@@ -1316,7 +1316,7 @@ var defaultRules /* : DefaultRules */ = {
     },
     autolink: {
         order: currOrder++,
-        match: inlineRegex(/^<([^ >]+:\/[^ >]+)>/),
+        match: inlineRegex(/^<([^: >]+:\/[^ >]+)>/),
         parse: function(capture, parse, state) {
             return {
                 type: "link",