-
Notifications
You must be signed in to change notification settings - Fork 2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(NOJIRA-123): update node to v20 for standards adoption #62
Conversation
Migrate to a monorepo
Co-authored-by: Scott Kingsley Clark <scott@skc.dev>
…#4201) Co-authored-by: odex <odex_2100@outlook.com>
Co-authored-by: Zihua Li <635902+luin@users.noreply.github.com>
Co-authored-by: Zihua Li <635902+luin@users.noreply.github.com>
Co-authored-by: Zihua Li <635902+luin@users.noreply.github.com>
Co-authored-by: Zihua Li <635902+luin@users.noreply.github.com>
Co-authored-by: Zihua Li <635902+luin@users.noreply.github.com>
⛔ Snyk checks have failed. 1 issues have been found so far.
⛔ code/snyk check is complete. 1 issues have been found. (View Details) |
2bceb2b
to
ebe16ca
Compare
const bindings = (this.bindings[evt.key] || []).concat( | ||
this.bindings[evt.which] || [], | ||
); | ||
const matches = bindings.filter(binding => Keyboard.match(evt, binding)); | ||
const matches = bindings.filter((binding) => | ||
Keyboard.match(evt, binding), |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Regular Expression Denial of Service (ReDoS)
Unsanitized user input from an event
flows into match
, where it is used to build a regular expression. This may result in a Regular expression Denial of Service attack (reDOS).
Line 187 | CWE-400 | Priority score 760 | Learn more about this vulnerability
Data flow: 4 steps
Step 1 - 2
return binding.key === evt.key || binding.key === evt.which; |
Step 3 - 4
quill/packages/quill/src/modules/keyboard.ts
Line 187 in ebe16ca
Keyboard.match(evt, binding), |
No description provided.