git-urls
git-urls copied to clipboard
Fix regex denial-of-service
This should fix https://github.com/whilp/git-urls/issues/24. Need to bump version from v1.0.0
to v1.0.1
Otherwise I am going to have to start using my forked version since this shows up as a Dependabot warning now.
See https://github.com/mojotx/git-goclone/security/dependabot/10
This attempts to address https://github.com/advisories/GHSA-3f2q-6294-fmq5 and https://github.com/whilp/git-urls/issues/24. It is an alternative to https://github.com/whilp/git-urls/pull/25, but with a more generous URL length limit of 8000 instead of 1000. It still completes in 500 µs on my system, for a URL of 8000 characters.