Skip to content

Commit

Permalink
fix: ReDoS attack vulnerability when searching documents that contain…
Browse files Browse the repository at this point in the history
… many space characters

see: #2097
see: https://snyk.io/vuln/SNYK-JS-REMOVEMARKDOWN-73635
  • Loading branch information
tommoor committed Apr 29, 2021
1 parent 61b2e63 commit 4d68a34
Show file tree
Hide file tree
Showing 2 changed files with 5 additions and 5 deletions.
2 changes: 1 addition & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -78,7 +78,7 @@
"@sentry/react": "^6.3.1",
"@sentry/tracing": "^6.3.1",
"@tippy.js/react": "^2.2.2",
"@tommoor/remove-markdown": "0.3.1",
"@tommoor/remove-markdown": "^0.3.2",
"autotrack": "^2.4.1",
"aws-sdk": "^2.831.0",
"babel-plugin-lodash": "^3.3.4",
Expand Down
8 changes: 4 additions & 4 deletions yarn.lock
Original file line number Diff line number Diff line change
Expand Up @@ -1989,10 +1989,10 @@
prop-types "^15.6.2"
tippy.js "^4.3.4"

"@tommoor/remove-markdown@0.3.1":
version "0.3.1"
resolved "https://registry.yarnpkg.com/@tommoor/remove-markdown/-/remove-markdown-0.3.1.tgz#25e7b845d52fcfadf149a3a6a468a931fee7619b"
integrity sha512-aM5TtBfBgcUm+B4WWelm2NBAFBk12oNUr67f5lJapSOTkPnwkuzCNwMlsBoDTsRknoZSsUIkcOJB473AnfyqHA==
"@tommoor/remove-markdown@^0.3.2":
version "0.3.2"
resolved "https://registry.yarnpkg.com/@tommoor/remove-markdown/-/remove-markdown-0.3.2.tgz#5288ddd0e26b6b173e76ebb31c94653b0dcff45d"
integrity sha512-awcc9hfLZqyyZHOGzAHbnjgZJpQGS1W1oZZ5GXOTTnbKVdKQ4OWYbrRWPUvXI2YAKJazrcS8rxPh67PX3rpGkQ==

"@types/babel__core@^7.0.0", "@types/babel__core@^7.1.7":
version "7.1.12"
Expand Down

0 comments on commit 4d68a34

Please sign in to comment.