From 588eb3993d46ba9cf8a9537df177c9ab4a6cd1fe Mon Sep 17 00:00:00 2001 From: npt-1707 Date: Mon, 17 Aug 2026 06:45:41 +0800 Subject: [PATCH] web/libs/js/socket.io.js: Limit str to 100 to avoid ReDoS of 0.3s --- web/libs/js/socket.io.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/libs/js/socket.io.js b/web/libs/js/socket.io.js index b8ebb290..71c23577 100644 --- a/web/libs/js/socket.io.js +++ b/web/libs/js/socket.io.js @@ -715,7 +715,7 @@ return /******/ (function(modules) { // webpackBootstrap function parse(str) { str = '' + str; - if (str.length > 10000) return; + if (str.length > 100) return; var match = /^((?:\d+)?\.?\d+) *(milliseconds?|msecs?|ms|seconds?|secs?|s|minutes?|mins?|m|hours?|hrs?|h|days?|d|years?|yrs?|y)?$/i.exec(str); if (!match) return; var n = parseFloat(match[1]);