Merge pull request #373 from switcherapi/staging

Fixed remaining reDoS vulnerabilities
switcherapi · Jan 30, 2023 · f5e4311 · f5e4311
2 parents b592d92 + 03df9a2
commit f5e4311
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/models/config-strategy.js b/src/models/config-strategy.js
@@ -270,9 +270,9 @@ async function processREGEX(operation, input, values) {
         case OperationsType.NOT_EXIST:
             return !(await processREGEX(OperationsType.EXIST, input, values));
         case OperationsType.EQUAL:
-            return input.match(`\\b${values[0]}\\b`) != null;
+            return await tryMatch([`\\b${values[0]}\\b`], input);
         case OperationsType.NOT_EQUAL:
-            return input.match(`\\b${values[0]}\\b`) == null;
+            return !(await tryMatch([`\\b${values[0]}\\b`], input));
     }
 }