mirror of
https://github.com/noctalia-dev/noctalia-shell.git
synced 2026-05-11 17:08:27 +08:00
Merge pull request #2328 from cbxcvl/fix/parse-if-redos
fix(renderer): remove ambiguous \s* from _parse_if regex to prevent ReDoS
This commit is contained in:
@@ -359,7 +359,7 @@ class TemplateRenderer:
|
||||
condition_part = condition_part[4:].strip()
|
||||
|
||||
# Extract expression from {{ ... }} if present
|
||||
expr_match = re.match(r'\{\{\s*(.+?)\s*\}\}', condition_part)
|
||||
expr_match = re.match(r'\{\{(.+?)\}\}', condition_part)
|
||||
if expr_match:
|
||||
condition_expr = expr_match.group(1).strip()
|
||||
else:
|
||||
|
||||
Reference in New Issue
Block a user