Fixed regular expression denial of service (ReDoS) vulnerability

knowledgecode · Dec 24, 2020 · 9e4b501 · 9e4b501
1 parent 73103a3
commit 9e4b501
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 8 deletions.
diff --git a/date-and-time.js b/date-and-time.js
@@ -136,7 +136,7 @@
      * @returns {Array.<string>} a compiled object
      */
     date.compile = function (formatString) {
-        var re = /\[([^\[\]]*|\[[^\[\]]*\])*\]|([A-Za-z])\2+|\.{3}|./g, keys, pattern = [formatString];
+        var re = /\[([^\[\]]|\[[^\[\]]*])*]|([A-Za-z])\2+|\.{3}|./g, keys, pattern = [formatString];
 
         while ((keys = re.exec(formatString))) {
             pattern[pattern.length] = keys[0];

diff --git a/date-and-time.min.js b/date-and-time.min.js