Fix ReDoS

caolan · Jul 19, 2024 · 0698642 · 0698642
1 parent e06e432
commit 0698642
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/autoInject.js b/lib/autoInject.js
@@ -2,8 +2,8 @@ import auto from './auto.js'
 import wrapAsync from './internal/wrapAsync.js'
 import { isAsync } from './internal/wrapAsync.js'
 
-var FN_ARGS = /^(?:async\s+)?(?:function)?\s*\w*\s*\(\s*([^)]+)\s*\)(?:\s*{)/;
-var ARROW_FN_ARGS = /^(?:async\s+)?\s*\(?\s*([^)=]*)\s*\)?(?:\s*=>)/;
+var FN_ARGS = /^(?:async\s)?(?:function)?\s*(?:\w+\s*)?\(([^)]+)\)(?:\s*{)/;
+var ARROW_FN_ARGS = /^(?:async\s)?\s*(?:\(\s*)?((?:[^)=\s]\s*)*)(?:\)\s*)?=>/;
 var FN_ARG_SPLIT = /,/;
 var FN_ARG = /(=.+)?(\s*)$/;