fix(core): Fix polynomial regex vulnerability

Fixes https://github.com/vendure-ecommerce/vendure/security/code-scanning/19
vendure-ecommerce · Oct 27, 2021 · 6675757 · 6675757
1 parent 752cc13
commit 6675757
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/core/src/api/common/extract-session-token.ts b/packages/core/src/api/common/extract-session-token.ts
@@ -35,7 +35,7 @@ function getFromCookie(req: Request): string | undefined {
 function getFromHeader(req: Request): string | undefined {
     const authHeader = req.get('Authorization');
     if (authHeader) {
-        const matches = authHeader.match(/bearer\s+(.+)$/i);
+        const matches = authHeader.match(/bearer\s(.+)$/i);
         if (matches) {
             return matches[1];
         }