fix ReDoS vulnerability (#185)

resolve #184 Co-authored-by: wonda-tea-coffee <[email protected]>
cgriego · Apr 12, 2021 · dab95e5 · dab95e5
1 parent 1da7562
commit dab95e5
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/active_attr/typecasting/boolean_typecaster.rb b/lib/active_attr/typecasting/boolean_typecaster.rb
@@ -42,7 +42,7 @@ def call(value)
         case value
         when *FALSE_VALUES then false
         when *NIL_VALUES then nil
-        when Numeric, /\A[-+]?(0+\.?0*|0*\.?0+)\z/ then !value.to_f.zero?
+        when Numeric, /\A[-+]?(0++\.?0*|0*+\.?0+)\z/ then !value.to_f.zero?
         else value.present?
         end
       end