fix: ReDoS problem

webpack · Nov 11, 2022 · 40f4345 · 40f4345
1 parent 52cd134
commit 40f4345
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/interpolateName.js b/lib/interpolateName.js
@@ -76,7 +76,7 @@ function interpolateName(loaderContext, name, options = {}) {
       // `hash` and `contenthash` are same in `loader-utils` context
       // let's keep `hash` for backward compatibility
       .replace(
-        /\[(?:([^:\]]+):)?(?:hash|contenthash)(?::([a-z]+\d*))?(?::(\d+))?\]/gi,
+        /\[(?:([^[:\]]+):)?(?:hash|contenthash)(?::([a-z]+\d*))?(?::(\d+))?\]/gi,
         (all, hashType, digestType, maxLength) =>
           getHashDigest(content, hashType, digestType, parseInt(maxLength, 10))
       );