Ref T13608. When searching for bare URIs in remarkup text, don't look for URIs with a protocol string longer than 32 characters.
This avoids a case where the regexp engine may be tricked into executing at O(N^2) or some similar complexity.
Differential D21562
Limit remarkup URI protocol length to 32 characters to avoid expensive regex behavior epriestley on Feb 17 2021, 9:12 PM. Authored by Tags None Referenced Files
Subscribers None
Details
Ref T13608. When searching for bare URIs in remarkup text, don't look for URIs with a protocol string longer than 32 characters. This avoids a case where the regexp engine may be tricked into executing at O(N^2) or some similar complexity.
Diff Detail
|