fix: ReDoS problem (#224)

webpack · Nov 11, 2022 · d2d752d · d2d752d
1 parent 52cd134
commit d2d752d
Show file tree

Hide file tree

Showing 2 changed files with 991 additions and 897 deletions.
diff --git a/lib/interpolateName.js b/lib/interpolateName.js
@@ -76,7 +76,7 @@ function interpolateName(loaderContext, name, options = {}) {
       // `hash` and `contenthash` are same in `loader-utils` context
       // let's keep `hash` for backward compatibility
       .replace(
-        /\[(?:([^:\]]+):)?(?:hash|contenthash)(?::([a-z]+\d*))?(?::(\d+))?\]/gi,
+        /\[(?:([^[:\]]+):)?(?:hash|contenthash)(?::([a-z]+\d*))?(?::(\d+))?\]/gi,
         (all, hashType, digestType, maxLength) =>
           getHashDigest(content, hashType, digestType, parseInt(maxLength, 10))
       );