Skip to content
This repository has been archived by the owner on Aug 3, 2023. It is now read-only.

Security fix for ReDoS #69

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

ready-research
Copy link

Fixed Regular Expression Denial of Service vulnerability in URL validation.

Reported in huntr https://www.huntr.dev/bounties/395edb43-4ef5-4582-b22d-3abbecfbcc14/
Please Confirm the fix once it's merged. Thanks.

@auto-assign auto-assign bot requested review from guqing, JohnNiang, LIlGG and ruibaby June 9, 2022 04:45
@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Jun 9, 2022

@ready-research: Adding the "do-not-merge/release-note-label-needed" label because no release-note block was detected, please follow our release note process to remove it.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@f2c-ci-robot f2c-ci-robot bot added the do-not-merge/release-note-label-needed Indicates that a PR should not merge because it's missing one of the release note labels. label Jun 9, 2022
@f2c-ci-robot
Copy link

f2c-ci-robot bot commented Jun 9, 2022

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@JohnNiang
Copy link
Member

/cc @halo-dev/sig-halo

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
do-not-merge/release-note-label-needed Indicates that a PR should not merge because it's missing one of the release note labels.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants