fix ReDoS-vulnerable regexp in addImage (#3091)

parallax · Feb 11, 2021 · d8bb3b3 · d8bb3b3
1 parent c91995d
commit d8bb3b3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/modules/addimage.js b/src/modules/addimage.js
@@ -630,7 +630,7 @@ import { atob, btoa } from "../libs/AtobBtoa.js";
     var result = null;
 
     if (dataUrlParts.length === 2) {
-      var extractedInfo = /^data:(\w*\/\w*);*(charset=[\w=-]*)*;*$/.exec(
+      var extractedInfo = /^data:(\w*\/\w*);*(charset=(?!charset=)[\w=-]*)*;*$/.exec(
         dataUrlParts[0]
       );
       if (Array.isArray(extractedInfo)) {