Fixed ReDoS in 'loadAnnotation' function of previous-map.js.

Sushant Mittal · xzyfer · commit a53b6f233e64 · 2022-08-10T11:21:20.000+10:00
diff --git a/src/previous-map.js b/src/previous-map.js
@@ -31,7 +31,7 @@ export default class PreviousMap {
     }
 
     loadAnnotation(css) {
-        let match = css.match(/\/\*\s*# sourceMappingURL=(.*)\s*\*\//);
+        let match = css.match(/\/\*\s*# sourceMappingURL=((?:(?!sourceMappingURL=).)*)\s*\*\//);
         if ( match ) this.annotation = match[1].trim();
     }
 

Original file line number	Diff line number	Diff line change
`@@ -31,7 +31,7 @@ export default class PreviousMap {`
`31`	`31`	`}`
`32`	`32`
`33`	`33`	`loadAnnotation(css) {`
`34`		`- let match = css.match(/\/\\s# sourceMappingURL=(.)\s\*\//);`
	`34`	`+ let match = css.match(/\/\\s# sourceMappingURL=((?:(?!sourceMappingURL=).))\s\*\//);`
`35`	`35`	`if ( match ) this.annotation = match[1].trim();`
`36`	`36`	`}`
`37`	`37`