avoid potential RegExp denial-of-service (#5135)

closes #5133 closes #5134
2021-09-29 18:49:46 +01:00
parent f766babf5e
commit 157521066f
4 changed files with 6 additions and 6 deletions
--- a/lib/compress.js
+++ b/lib/compress.js
@@ -11336,7 +11336,7 @@ merge(Compressor.prototype, {

    function decode_template(str) {
        var malformed = false;
-        str = str.replace(/\\(u\{[^}]*\}?|u[\s\S]{0,4}|x[\s\S]{0,2}|[0-9]+|[\s\S])/g, function(match, seq) {
+        str = str.replace(/\\(u\{[^{}]*\}?|u[\s\S]{0,4}|x[\s\S]{0,2}|[0-9]+|[\s\S])/g, function(match, seq) {
            var ch = decode_escape_sequence(seq);
            if (typeof ch == "string") return ch;
            malformed = true;