prevent regex backtracking

GEOLYTIX · Nov 2, 2023 · d3d551e · d3d551e
1 parent 05ec21f
commit d3d551e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/mod/provider/cloudfront.js b/mod/provider/cloudfront.js
@@ -11,7 +11,7 @@ module.exports = async ref => {
   try {
 
     // Subtitutes {*} with process.env.SRC_* key values.
-    const url = (ref.params?.url || ref).replace(/[{](.*?)[}]/g,
+    const url = (ref.params?.url || ref).replace(/{(?!{)(.*?)}/g,
       matched => process.env[`SRC_${matched.replace(/(^{)|(}$)/g, '')}`])
 
     const date = new Date(Date.now())

diff --git a/mod/provider/file.js b/mod/provider/file.js
@@ -6,7 +6,7 @@ module.exports = async ref => {
   try {
 
     // Subtitutes {*} with process.env.SRC_* key values.
-    const path = (ref.params?.url || ref).replace(/[{](.*?)[}]/g,
+    const path = (ref.params?.url || ref).replace(/{(?!{)(.*?)}/g,
       matched => process.env[`SRC_${matched.replace(/(^{)|(}$)/g, '')}`])
 
     const file = readFileSync(join(__dirname, `../../${path}`))