Make RFC2822 regexp linear

https://hackerone.com/reports/1485501
ruby · Mar 24, 2023 · 3dce6f7 · 3dce6f7
1 parent b57db51
commit 3dce6f7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/time.rb b/lib/time.rb
@@ -510,7 +510,7 @@ def rfc2822(date)
           (\d{2,})\s+
           (\d{2})\s*
           :\s*(\d{2})
-          (?:\s*:\s*(\d{2}))?\s+
+          (?:\s*:\s*(\d\d))?\s+
           ([+-]\d{4}|
            UT|GMT|EST|EDT|CST|CDT|MST|MDT|PST|PDT|[A-IK-Z])/ix =~ date
         # Since RFC 2822 permit comments, the regexp has no right anchor.