prevent extraordinary long inputs (@evilpacket)

vercel · Apr 20, 2015 · 48701f0 · macalinao · Nov 6, 2015 · evilpacket
1 parent 6cd2d0b
commit 48701f0
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/index.js b/index.js
@@ -38,6 +38,8 @@ module.exports = function(val, options){
  */
 
 function parse(str) {
+  str = '' + str;
+  if (str.length > 10000) return;
   var match = /^((?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|years?|yrs?|y)?$/i.exec(str);
   if (!match) return;
   var n = parseFloat(match[1]);