Merge pull request #3 from EffectRenan/master

Fix for Denial of Service vulnerability
This commit is contained in:
huntr.dev | the place to protect open source 2021-02-12 07:54:26 +00:00 committed by GitHub
commit 743cefc10c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 1 additions and 1 deletions

View File

@ -38,7 +38,6 @@ function inetChecksite(url, callback) {
const s = util.sanitizeShellString(url);
for (let i = 0; i <= 2000; i++) {
if (!(s[i] === undefined ||
s[i] === ' ' ||
s[i] === '{' ||
s[i] === '}')) {
s[i].__proto__.toLowerCase = util.stringToLower;

View File

@ -527,6 +527,7 @@ function sanitizeShellString(str) {
s[i] === '\n' ||
s[i] === '\'' ||
s[i] === '`' ||
s[i] === ' ' ||
s[i] === '"')) {
result = result + s[i];
}