From c035d7384c4669235afbfa13d1b0ab4209ca6e8b Mon Sep 17 00:00:00 2001 From: "B. Caller" <73827525+b-c-ds@users.noreply.github.com> Date: Tue, 16 Feb 2021 18:59:28 +0000 Subject: [PATCH] Fix NewDateRegex in StringExtensions #1556 Previously it had exponential worst-case complexity and was vulnerable to REDoS. --- src/RestSharp/Extensions/StringExtensions.cs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/RestSharp/Extensions/StringExtensions.cs b/src/RestSharp/Extensions/StringExtensions.cs index de7c9b624..1e65650aa 100644 --- a/src/RestSharp/Extensions/StringExtensions.cs +++ b/src/RestSharp/Extensions/StringExtensions.cs @@ -25,7 +25,7 @@ namespace RestSharp.Extensions public static class StringExtensions { static readonly Regex DateRegex = new Regex(@"\\?/Date\((-?\d+)(-|\+)?([0-9]{4})?\)\\?/"); - static readonly Regex NewDateRegex = new Regex(@"newDate\((-?\d+)*\)"); + static readonly Regex NewDateRegex = new Regex(@"newDate\((-?\d+)\)"); static readonly Regex IsUpperCaseRegex = new Regex(@"^[A-Z]+$");