Skip to content

@cloudflare/worker-bundler@0.2.2

Choose a tag to compare

@github-actions github-actions released this 22 Jul 16:34
83e093b

Patch Changes

  • #1961 365ced3 Thanks @agent-think! - fix: eliminate polynomial-time ReDoS in import/export matching. The importExportRegex in rewriteImports and the regex fallback in parseImports matched the import clause with [\w*{}\s,]+ followed by \s+, letting both quantifiers consume the same whitespace and backtrack catastrophically on near-match inputs (import + 10k spaces took ~175s). Clauses are now matched as non-whitespace tokens separated by whitespace and bounded at the next import/export keyword, eliminating both overlapping backtracking and repeated suffix scans while preserving valid imports.