Fix a ReDoS in 'style' format

As there are no `^` or `$` anchors in the regex, this should be equivalent. Patch deliberately does not change the behavior.
mafintosh · Jun 29, 2020 · ccde29d · ccde29d
1 parent 9df4acb
commit ccde29d
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/formats.js b/formats.js
@@ -28,7 +28,7 @@ exports['hostname'] = function (input) {
 }
 exports['alpha'] = /^[a-zA-Z]+$/
 exports['alphanumeric'] = /^[a-zA-Z0-9]+$/
-exports['style'] = /\s*(.+?):\s*([^;]+);?/g
+exports['style'] = /.:\s*[^;]/g
 exports['phone'] = function (input) {
   if (!(rePhoneFirstPass.test(input))) return false
   if (rePhoneDoubleSpace.test(input)) return false