Commits on Feb 27, 2018

1. security: fix regexes vulnerable to catastrophic backtracking …

   Problem:
   Four regexes were vulnerable to catastrophic backtracking.
   This leaves markdown servers open to a potential REDOS attack.
   
   Solution:
   Refactor the regexes.
   
   For two similar regexes (html) I didn't change the language.
   For two similar regexes (noline) I slightly changed the language:
   
   ![[[[[[[[[[[]] was accepted by the old noline pattern.
   It is now rejected.
   
   All tests pass, though I'm not sure if I've broken something that
   was untested.
   
   This addresses markedjs#1070 (with markedjs#1058 along the way).
   
   Bonus: rename a stray test to use _ instead of -.

   

   davisjam committed Feb 27, 2018
   Copy the full SHA

   b15e42b View commit details

   Browse the repository at this point in the history

2. test: add time check …

   Fail tests that take more than 1 second

   

   davisjam committed Feb 27, 2018
   Copy the full SHA

   2846212 View commit details

   Browse the repository at this point in the history