Merge pull request #155 from pantheon-systems/PCC-881-security-scan-f…

…indings-polynomial-regular-expression-used-on-uncontrolled-data-pcc-sdk Resolve security issue "Polynomial regular expression used on uncontrolled data" by using positive lookahead in regex.
pantheon-systems · Dec 28, 2023 · 432dc41 · 432dc41
2 parents 8d343af + 7006045
commit 432dc41
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/core/src/core/pantheon-client.ts b/packages/core/src/core/pantheon-client.ts
@@ -64,7 +64,7 @@ export class PantheonClient {
     // It defaults to our production API endpoint. In a future release it will
     // be a more human-friendly URL.
     const pccHost =
-      config.pccHost?.replace(/\/+$/, "") ||
+      config.pccHost?.replace(/\/(?<=\/)\/*$/, "") ||
       "https://pcc-gfttxsojwq-uc.a.run.app";
 
     this.host = pccHost;