shellwords
shellwords copied to clipboard
jimmycuadra
Manipulate strings according to the word parsing rules of the UNIX Bourne shell.
👋 Hi there, we're using shellwords in`@effection/node` and it's been really great so far. I noticed that the last major change to this was eight years ago. Amazing how software...
## Vulnerability type RegExp Denial-of-Service——catastrophic backtracking in regex evaluation ## Vulnerability Location In the `split` function of `[email protected]`, the following regular expression is used: ```javascript /\s*(?:([^\s\\'"]+)|'((?:[^'\\]|\\.)*)'|"((?:[^"\\]|\\.)*)"|(\\.?)|(\S))(\s|$)?/ ``` ## Description The...
Metadata
Owner
Metadata
Manipulate strings according to the word parsing rules of the UNIX Bourne shell.