Blame SOURCES/0003-fix-eliminate-ReDoS-36.patch

8dc9a8
From 77d803b877935e51c42e8bd66510d41f3e76460c Mon Sep 17 00:00:00 2001
8dc9a8
From: Rich Trott <rtrott@gmail.com>
8dc9a8
Date: Sat, 6 Mar 2021 13:16:16 -0800
8dc9a8
Subject: [PATCH] fix: eliminate ReDoS (#36)
8dc9a8
8dc9a8
This change fixes a regular expression denial of service
8dc9a8
vulnerability.
8dc9a8
8dc9a8
Refs: https://github.com/gulpjs/glob-parent/issues/32
8dc9a8
Refs: https://app.snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905
8dc9a8
Signed-off-by: rpm-build <rpm-build>
8dc9a8
---
8dc9a8
 node_modules/glob-parent/index.js | 2 +-
8dc9a8
 1 file changed, 1 insertion(+), 1 deletion(-)
8dc9a8
8dc9a8
diff --git a/node_modules/glob-parent/index.js b/node_modules/glob-parent/index.js
8dc9a8
index 2ded6ea..c7b3bd3 100644
8dc9a8
--- a/node_modules/glob-parent/index.js
8dc9a8
+++ b/node_modules/glob-parent/index.js
8dc9a8
@@ -6,7 +6,7 @@ var isWin32 = require('os').platform() === 'win32';
8dc9a8
 
8dc9a8
 var slash = '/';
8dc9a8
 var backslash = /\\/g;
8dc9a8
-var enclosure = /[\{\[].*[\/]*.*[\}\]]$/;
8dc9a8
+var enclosure = /[\{\[].*[\}\]]$/;
8dc9a8
 var globby = /(^|[^\\])([\{\[]|\([^\)]+$)/;
8dc9a8
 var escaped = /\\([\*\?\|\[\]\(\)\{\}])/g;
8dc9a8
 
8dc9a8
-- 
8dc9a8
2.31.1
8dc9a8