Skip to content

Harden parser regex handling - #8

Merged
Ryson-32 merged 1 commit into
mainfrom
ryan/dev
Jun 17, 2026
Merged

Harden parser regex handling#8
Ryson-32 merged 1 commit into
mainfrom
ryan/dev

Conversation

@Ryson-32

Copy link
Copy Markdown
Member

Summary

  • Replace vulnerable parser regular expressions with linear string parsing for CodeQL ReDoS alerts.
  • Add focused ReDoS regression coverage for long malformed subscription inputs.

Tests

  • npm run test:core
  • npm run lint
  • npm run test:unit
  • npm run local:build

@Ryson-32
Ryson-32 merged commit b9e2e51 into main Jun 17, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant