[Pkg-mozext-commits] [firebug] 01/18: Issue 8012: Regular Expression DoS

[David Prévot]

This is an automated email from the git hooks/post-receive script.

taffit pushed a commit to branch master
in repository firebug.

commit 9c06765ab4c3b376a3a3e006e091eae1bdbe9690
Author: Simon Lindholm <simon.lindholm10 at gmail.com>
Date:   Tue Apr 19 11:19:29 2016 +0200

    Issue 8012: Regular Expression DoS
---
 extension/content/firebug/lib/url.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/extension/content/firebug/lib/url.js b/extension/content/firebug/lib/url.js
index 00e7295..7c29760 100644
--- a/extension/content/firebug/lib/url.js
+++ b/extension/content/firebug/lib/url.js
@@ -417,7 +417,7 @@ Url.normalizeURL = function(url)
 
     // Normalize path traversals (a/b/../c -> a/c).
     while (url.indexOf("/../") !== -1 && url[0] != "/")
-        url = url.replace(/[^\/]+\/\.\.\//g, "");
+        url = url.replace(/[^\/]+\/+\.\.\//g, "");
 
     // Issue 1496, avoid #
     url = url.replace(/#.*/, "");

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-mozext/firebug.git